Connect WordPress with Application Password – StackOne Hub

​

Find your Site URL

The Site URL is the address visitors use to open your WordPress site.

• Sign in to your WordPress dashboard, usually at https://{host}/wp-admin, and navigate to Settings > General.
• Copy the Site Address (URL). On a site whose WordPress files sit in a sub-folder, this can differ from the WordPress Address (URL) above it, so use the Site Address (URL).
• Format: https://{host} or https://{host}/{folder}
• Example: https://blog.example.com
• A site served from a sub-folder keeps its folder, for example https://example.com/blog.
• On a multisite network, Settings > General shows no address. Navigate to My Sites > Network Admin > Sites, select Edit under the site this connection reads, and copy its Site Address (URL) from the Info tab.
• A trailing slash, /wp-admin or /wp-json is ignored, and the connection always uses https. The connection works with any permalink setting.
• The address must be a plain host name with a dot, an optional port and path, and no username, spaces or other characters, otherwise the connection fails.
• Paste it into the Site URL field in StackOne Hub.

​

Create the Application Password

An Application Password lets StackOne read your site’s users through the REST API without your real password. It carries the permissions of the Administrator who creates it.

​

Find your Username

The Username is the login of the Administrator who created the password. An email address also works.

• Navigate to Users > Profile and copy the Username at the top of the page.
• Paste it into the Username field in StackOne Hub.

​

Know what a smaller role breaks

StackOne reads every user on the site, including their roles and directly granted capabilities, and reads each user’s Application Password names and dates, never the passwords themselves. Only an Administrator can do that.

• A user with another role is refused, and the connection test fails with a message that names the Administrator requirement.
• On a multisite network a site Administrator sees only part of the user list. The connection test then fails and asks for a Super Admin’s Application Password.
• A wrong Username, a wrong password or a revoked password all fail with the same answer from WordPress. Check all three if the connection is refused.

​

Revoke the password

To stop StackOne from reading your site, revoke the Application Password. The connection then fails until you paste a new one into StackOne Hub.

• Navigate to Users > Profile and scroll to Application Passwords.
• Click Revoke next to the password named StackOne Integration. The Last Used column shows when it was last used.
• Revoke all application passwords removes every password for that user, including ones other tools use.