Username and password authentication for Heroku API is now deprecated

Change effective on 05 January 2023

Starting January 10th, 2023, Heroku is deprecating username / password authentication to access the Heroku API to better protect our customers and their data. You can no longer make API requests with a username and password. This change is part of a larger effort to enforce multi-factor authentication (MFA) for Heroku Dashboard, CLI, and API users.

Users can continue to exchange an expiring token for a non-expiring one using their MFA-enabled accounts.

Add-on providers can continue to access the Platform API for Partners using an access token. Legacy add-on providers can also continue to use Legacy Partner APIs until their end-of-life on July 3rd, 2023.