For anyone who gets hung up on making an app password, Google only offers this option if you have 2FA turned on. So that’s your first step! 
Hope that helps someone else!
This works great for transactional emails on my Windows-running development setup.