Tag

WordPress Application Passwords

Code editor card showing wp_set_secret, wp_get_secret, wp_list_secrets and wp_retire_secret_version from the WordPress 7.2 Beta 1 source

Oct 23, 202615 min

WordPress 7.2 Secrets API: A Standard Place for API Keys and Tokens

WordPress 7.2 Beta 1 ships a Secrets API: encrypted, versioned storage for API keys and tokens. What it does, what it does not protect against, the functions in the Beta 1 source, and what to ask your plugin vendors.

WordPress Application Passwords WordPress Core

Apr 24, 20269 min

WordPress Application Passwords: REST API Guide for Developers

Guide to wordpress application passwords for REST API authentication without exposing your main password. Covers wp_is_application_passwords_available, the edit_posts capability gate, cURL, JS Fetch, PHP examples, revocation, and security best practices for 2026.

api-first architecture REST API Authentication