application specific password

My email application can no longer sign in to my iCloud.com email address with two-factor authentication enabled. I get an error telling me I need an Application Specific password. How do I get one of those? I tried the technique for older versions of MacOS i.e. appending the assigned code to the end of the password but that fails.