Founding offer 50% off all plans for the first 100 customers, and your renewal price is locked for life. 74 spots left Claim your spot
Turquoise abstract wavy W logo on a black background
Turquoise abstract wavy W logo on a black background
White WP PowerSuite logo on a black background
White WP PowerSuite logo on a black background

Summarize with AI:

On This Page
Last updated: 24/07/2026

Disable Application Passwords

Disables WordPress application passwords site-wide: blocks REST/XML-RPC login with app tokens and hides the profile UI. Normal account passwords and logged-in REST access are unaffected. Existing tokens remain stored but cannot authenticate until this module is off. May break mobile apps, headless sites, and automation that rely on application passwords.

Overview

Turns off WordPress application passwords site-wide: blocks REST/XML-RPC authentication with app tokens and hides the profile UI. Normal passwords and cookie-based logged-in REST access still work. Existing tokens remain stored but cannot authenticate until the module is off. Soft conflict with Two-Factor Authentication—2FA’s “require application passwords for REST/XML-RPC” is disabled when this module is on. No settings UI.

Solid black square
Solid black square
Who is this for?
  • Brochure sites with no API clients or mobile apps
  • Teams reducing unused authentication surface
  • Not headless, CI, or app-connected WordPress installs

Features

Site-wide disable
Application passwords cannot authenticate while enabled.
Hides profile UI
Removes the Application Passwords section from profiles.
REST / XML-RPC token block
Stops app-token login on those channels.
Normal passwords untouched
Account passwords and logged-in REST still work.
Reversible
Stored tokens work again when you turn the module off.

Use Cases

  • Simple brochure hardening
    No mobile app, no headless CMS—turn app passwords off.
  • Reduce forgotten tokens
    Stop old automation tokens from remaining a live auth path.
  • Pair with REST public disable
    Shrink anonymous and token-based API surface together.

Frequently Asked Questions

Related Modules

Disable Password Reset

Turn off public "forgot password" self-service for everyone. Use only when you reset passwords another way (manual admin password, WP-CLI, or admin-sent...
Security
Disabled

IP Allow & Block List Pro

Allow or block visitors by IP address—ideal for office-only dashboards or shutting out known troublemakers. Rules apply site-wide, including wp-admin and login.
Security
Disabled

Disable File Editing

Remove the dashboard screens that let anyone edit theme or plugin code from the browser—one less disaster if an account is compromised.
Security
Disabled

Password Protection

Put your whole site behind one shared password—ideal for staging, client previews, or a soft launch before you go public.
Security
Disabled

Activity Log

Keep a clear record of important dashboard activity—who logged in, what changed, and when—so you can investigate issues or stay audit-ready without...
Security
Disabled

Cloudflare Turnstile

Bot protection with Cloudflare Turnstile on logins, forms, comments, and WooCommerce—low hassle for real people.
Security
Disabled

Block Usernames

Blocks risky default usernames during registration so bots have fewer easy targets.
Security
Disabled

Force SSL Admin

Always open your dashboard and login screen over a secure https:// link. Anyone using the old http:// address is sent to the...
Security
Disabled

Email Obfuscator

Automatically protects visible email addresses and mailto links from basic spam bots by safely encoding them while keeping them clickable for visitors.
Security
Disabled

Two-Factor Authentication (2FA)

Two-factor login for selected roles—extra proof beyond the password.
Security
Disabled
Founding Member Offer 74 of 100 spots left

Before you go, here's what you'd be leaving.

WP PowerSuite launched this month. The first 100 customers get 50% off and keep that renewal price permanently. When the offer closes on 31 August 2026, prices return to $79 / $239 / $399 and stay there.

  • 154 modules, all included on every plan
  • Renewal price locked for life
  • 14-day refund, one email, no questions
See founding pricing
26 founding members so far 22 days left