Key takeaways
- →Application Passwords are built into WordPress and can be revoked without changing your login password.
- →A 401 error usually means a wrong username or password; a 403 usually means a firewall or security plugin.
- →Allow-list the tool's server address in Cloudflare or your host's firewall when 403 errors appear.
What an Application Password is
Since WordPress 5.6, every user profile can create Application Passwords: long random passwords that work only for the REST API, not for logging into wp-admin. Each one has a name, so you can see which tool uses it and revoke it individually.
Creating one
- Open your profile
WP Admin, Users, Profile, then scroll to Application Passwords.
- Name it
Use the tool's name, for example RecipeFox AI, and click Add New Application Password.
- Copy it once
WordPress shows the password only once. Paste it into the tool together with your WordPress username.
Fixing connection errors
| Error | Usual cause | Fix |
|---|---|---|
| 401 Unauthorized | Wrong username or password, or the password was revoked | Create a new Application Password and update it in the tool |
| 403 Forbidden from WordPress | User role lacks permission, or a security plugin disabled the REST API | Use an Editor or Administrator account; allow REST API access for authenticated users |
| 403 from Cloudflare or the host | Firewall blocks the tool's server address | Allow-list the address or the /wp-json/ path in Cloudflare WAF or the hosting firewall |
| Read timed out | Slow hosting under load | Publish fewer posts at once; RecipeFox queues retries one at a time per site |
Good security habits
- 01Create a separate Application Password for each tool
- 02Revoke passwords for tools you stop using
- 03Use an Editor role account for publishing when you do not need plugin management
Questions readers ask
- My Application Passwords section is missing. Why?
- A security plugin or your host may have disabled it, or the site is not served over HTTPS. Check the security plugin settings first.
- Does revoking an Application Password log me out?
- No. It only stops the tool that used that password.
RecipeFox AI Editorial
FOXVISITS LTD, Scotland · Updated 20 October 2026
The team that builds RecipeFox AI and runs its WordPress recipe publishing pipeline: recipe plugins, structured data, internal linking and quality checks.