Get an App Password at bsky.app/settings/app-passwords
All authentication happens in your browser. Nothing is sent to any server except Bluesky's API.