Google SMTP Security Blocks Email Deliverability

Hi everyone,

I have my email hosted by Google (Workspace).
All of a sudden I can't send emails (ex invoices).
Long story short, Google changed security AGAIN and now "use less secure is deprecated" so SMTP must have 2-factor authentication turned on (this can be done inside your account security settings) AND an "app password". The app password is buried in security settings - only accessible when 2FA is turned on BUT you have to search for it.

I'm typing all this in case any other users run into this - hope it helps.