Two Factor Authentication

You can use app passwords for desktop and mobile clients when using two-factor authentication. See https://central.owncloud.org/t/access-forbidden-by-server-on-windows-desktop-client-application/10070/6