Real Atlassian solutions to real problems — no fluff, no SEO spam.
You swapped the app password for an API token and Bitbucket still says app passwords are deprecated. The token is not the problem and neither are its scopes. Git is re-sending the dead credential because git only erases a stored credential on a 401, and the status code Bitbucket chose for this is 410. I measured which codes clear a credential and which do not, on git 2.50.1, against both the store helper and the macOS keychain.
App passwords are removed on 28 July 2026, and in the final week they were already dark 20 hours out of every 24. Here is the failure signature, the three different usernames nobody can keep straight, why swapping in a token often changes nothing, and the reason almost no team can tell you who is still affected.
