Today my Zoho email account and two email accounts of one of my clients each received a "Third-party application access to your Zoho Account" email. After looking into the IP listed in the email I received, I found out it was my iPhone's mobile IP. So at least it wasn't any hacker or other illegitimate access.

But this is the first time I received an email like this. It was quite unexpected since I had been using my regular Zoho account password to login to my email account for years. Are we supposed to create Application-Specific Passwords for email clients now?