Thank you for attempting to help, but I’m afraid those instructions won’t be much use here.
To clear up any confusion, WordPress.COM and WordPress.ORG are two different entities: https://wordpress.org/documentation/article/difference-between-wordpress-org-and-wordpress-com/
WordPress.ORG sites do not have two-factor authentication unless added by a plugin, and each plugin handles application passwords differently (and not through WordPress.COM).
In most cases, when a WordPress.ORG site cannot connect with Microsoft Word, it’s because the site owner is either intentionally or unintentionally blocking XML-RPC.
Blocking XML-RPC is not an excellent solution for fighting security risks. Instead, it’s akin to selling your car because you don’t want it to be stolen. The XML-RPC file is like a communication gateway to your site. The WordPress Mobile Apps and several plugins and services will use that file to communicate with your site. If it’s blocked, different issues will pop up down the road for the same reasons.