Link. Like Google’s. I don’t think they are necessarily “app-specific”; they are basically revocable backdoor passwords. Unfortunately you can’t use them with iCloud.com.