Application Passwords
How to create one — and the username trap that catches everyone.
An Application Password is a separate password WordPress generates for software that needs to talk to your site. It is not your login password, it never gives access to wp-admin, and you can revoke it at any time without changing anything else.
Use your username, not your email
This is the single most common connection failure. The WordPress login form accepts either your username or your email address, so most people never learn their username. Application Passwords only accept the username. If you paste your email address, the connection fails with an authentication error even though the password is correct.
You can find your username in wp-admin under Users → Profile. It is the value in the Username field, and WordPress will not let you change it.
Creating one
- 1In wp-admin, open Users → Profile (or Users → All Users and edit your account).
- 2Scroll to the Application Passwords section at the bottom.
- 3Type a name you'll recognise later, such as Pressbotics.
- 4Click Add New Application Password.
- 5Copy the generated password. WordPress shows it once and never again.
- 6Paste your username and that password into the Pressbotics connection wizard.
The generated password contains spaces. Paste it exactly as shown — Pressbotics handles the spacing.
If the section isn't there
- Application Passwords require WordPress 5.6 or newer.
- They are disabled over plain HTTP. Your site needs HTTPS.
- Some security plugins disable the feature; check their settings.
- Your account needs permission to publish posts on the site.
Revoking
Delete the Application Password in the same screen, or disconnect the site in Pressbotics — disconnecting clears the stored credential immediately.

