Gmail Blaster sends email through Gmail’s SMTP server over an SSL connection. Your app password is read from the GMAIL_PASSWORD field in the workbook’s SETTINGS sheet.
Protect the workbook because anyone with access to it may be able to read that password. If it is exposed, revoke the app password in your Google Account and create a replacement.