App passwords are being deprecated in Atlassian's Bitbucket Cloud with this announce.

Instead, API tokens with scopes should be used, see Atlassian documentation

However credentials mentioned in the user manual:

• HTTP Access tokens at the repository, project, or workspace level
• OAuth at the workspace level
  are not permitted in some companies.

Atlassian/Bitbucket provides a new API tokens that have new feature like Expiration control and Centralized management.