> ## Documentation Index
> Fetch the complete documentation index at: https://docs.stackone.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Connect WordPress with Application Password – StackOne Hub

> Link a WordPress account in the StackOne Hub using Application Password. End-user guide to authorize the integration and start using WordPress actions.

> [!WARNING]
>
> The Application Password must belong to an Administrator, the smallest built-in role that works. WordPress cannot limit an Application Password to reading, so it carries every permission of that Administrator, and a Super Admin's works on every site in the network. StackOne only reads. Editor, Author, Contributor and Subscriber are refused. On a multisite network use a Super Admin, one site per connection. The site must be served over https, because the connection always uses https. A security plugin or the site host can turn Application Passwords off.

## Find your Site URL

The **Site URL** is the address visitors use to open your WordPress site.

<ul>
  <li>Sign in to your WordPress dashboard, usually at `https://{host}/wp-admin`, and navigate to **Settings** > **General**.</li>
  <li>Copy the **Site Address (URL)**. On a site whose WordPress files sit in a sub-folder, this can differ from the **WordPress Address (URL)** above it, so use the **Site Address (URL)**.</li>
  <li>Format: `https://{host}` or `https://{host}/{folder}`</li>
  <li>Example: `https://blog.example.com`</li>
  <li>A site served from a sub-folder keeps its folder, for example `https://example.com/blog`.</li>
  <li>On a multisite network, **Settings** > **General** shows no address. Navigate to **My Sites** > **Network Admin** > **Sites**, select **Edit** under the site this connection reads, and copy its **Site Address (URL)** from the **Info** tab.</li>
  <li>A trailing slash, `/wp-admin` or `/wp-json` is ignored, and the connection always uses https. The connection works with any permalink setting.</li>
  <li>The address must be a plain host name with a dot, an optional port and path, and no username, spaces or other characters, otherwise the connection fails.</li>
  <li>Paste it into the **Site URL** field in StackOne Hub.</li>
</ul>

## Create the Application Password

An Application Password lets StackOne read your site's users through the REST API without your real password. It carries the permissions of the Administrator who creates it.

**1. Sign in to WordPress**

Sign in to your WordPress dashboard, usually at `https://{host}/wp-admin`, as an Administrator, or as a Super Admin on a network.

<ul>
  <li>Navigate to **Users** > **Profile**.</li>
  <li>Scroll to **Application Passwords**.</li>
  <li>If the section shows "The application password feature requires HTTPS, which is not enabled on this site.", the site is not served over https and cannot connect.</li>
  <li>If it shows "Your website appears to use Basic Authentication, which is not currently compatible with Application Passwords.", the site sits behind a server password prompt, which blocks Application Passwords.</li>
  <li>If the section is missing, a security plugin or the site host has turned Application Passwords off.</li>
</ul>

**2. Name the password**

Type a name in **New Application Password Name**.

<ul>
  <li>**New Application Password Name**: `StackOne Integration`</li>
</ul>

**3. Add the password**

Click **Add Application Password**.

<ul>
  <li>On WordPress versions before 6.8 the button reads **Add New Application Password**.</li>
</ul>

**4. Copy the password**

Copy the new password with the **Copy** button and store it securely for use later.

<ul>
  <li>The password is shown only once. WordPress says "Be sure to save this in a safe location. You will not be able to retrieve it."</li>
  <li>On WordPress versions before 6.7 there is no **Copy** button. Select the password in the box and copy it.</li>
  <li>Paste it into the **Application Password** field in StackOne Hub, with or without the spaces.</li>
</ul>

## Find your Username

The **Username** is the login of the Administrator who created the password. An email address also works.

<ul>
  <li>Navigate to **Users** > **Profile** and copy the **Username** at the top of the page.</li>
  <li>Paste it into the **Username** field in StackOne Hub.</li>
</ul>

## Know what a smaller role breaks

StackOne reads every user on the site, including their roles and directly granted capabilities, and reads each user's Application Password names and dates, never the passwords themselves. Only an Administrator can do that.

<ul>
  <li>A user with another role is refused, and the connection test fails with a message that names the Administrator requirement.</li>
  <li>On a multisite network a site Administrator sees only part of the user list. The connection test then fails and asks for a Super Admin's Application Password.</li>
  <li>A wrong Username, a wrong password or a revoked password all fail with the same answer from WordPress. Check all three if the connection is refused.</li>
</ul>

## Revoke the password

To stop StackOne from reading your site, revoke the Application Password. The connection then fails until you paste a new one into StackOne Hub.

<ul>
  <li>Navigate to **Users** > **Profile** and scroll to **Application Passwords**.</li>
  <li>Click **Revoke** next to the password named `StackOne Integration`. The **Last Used** column shows when it was last used.</li>
  <li>**Revoke all application passwords** removes every password for that user, including ones other tools use.</li>
</ul>

## Linking the Account from the Hub

**1. Navigate to the Hub**

Use one of the three [Linking Account Methods](https://docs.stackone.com/connect/managing-connectors/linking-accounts.md) to access the Hub.

**2. Fill out the fields**

Fill out the following fields using details from your provider:

<ul>
  <li>**Site URL**</li>
  <li>**Username**</li>
  <li>**Application Password**</li>
</ul>

**3. Connect**

<ul>
  <li>Click **Connect**</li>
  <li>If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider's authorization flow.</li>
  <li>Once authorization is successful, you will see a confirmation popup</li>
</ul>

If the account linking is successful, you will see the newly linked account on your [Accounts](https://app.stackone.com/accounts) page.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.