device/service specific passwords

[E.S. Rosenberg]

Hi all,

Does anyone have experience/pointers on how to implement passwords for
specific services/devices, ie. have a different password that only
works for imap/webmail and can be stored in a device without worrying
about compromise going any further then what the password gives access
to?

(Similar to googles' device passwords)

I realize that by having a key on ssh the password for ssh would not
be the same as the login password for a user but I would like to be
even more fine-grained.

Thanks and שבת שלום,
Eliyahu - אליהו