Generate scoped app passwords to connect IMAP / SMTP clients (Thunderbird, iOS Mail). Primary credentials cannot be used on IMAP/SMTP ports.
Two-Factor Authentication is enabled. Enter the 6-digit code from your authenticator app.