Application passwords are turned off
Workover connects to WordPress with an application password, which you approve in your WordPress admin during connection. If application passwords are turned off on your site, or for your user, the connection cannot be made, or an existing one stops working. Older versions of this page were titled “Application Passwords not available or authorization access is missing.”
Application passwords let you approve Workover in your own WordPress admin, so Workover never receives your WordPress login password and you do not need a connector plugin.
Before you start: you need admin access to your WordPress site and to any security plugin or hosting setting that controls application passwords.
What you might see
| Where | Message |
|---|---|
| Your WordPress admin, while connecting | “Application passwords are not available.” or “Application passwords are not available for your account.” |
| The WP tab, after a push or publish | ” refused the connection. Application passwords are switched off for this site or for this user, so no password can authenticate until they are enabled again in WordPress.” |
| Email to the workspace owner | “Workover has stopped syncing with “, saying application passwords have been switched off |
Turn application passwords back on
- Make sure your site is served over HTTPS. WordPress only offers application passwords on HTTPS sites, apart from local development environments.
- In your security plugin or your host’s hardening settings, turn off any option that blocks or disables application passwords.
- In Workover, open the project and select Project settings.
- Connect the site again. If the panel shows a Connect to WordPress card, enter the site address and select Connect. If it shows Connected site, select Change site, enter the same address and select Reconnect.
- Approve the connection in your WordPress admin when Workover redirects you there.
For firewall, security plugin and Cloudflare Access problems, see Let Workover reach a site behind a firewall or Cloudflare Access. That page covers this case too.
Related
Still need help?
Can’t find what you’re looking for? Our team is here to help.