To connect your product to WordPress via the API, you need to use an application password. This is an essential step to ensure security and authenticate your application when sending requests to WordPress. Below is a detailed guide on how to create an application password in WordPress:

What is an Application Password?

An application password is a securely generated key that is used to authenticate REST API requests. Key points to note:

• Application passwords cannot be used to log in to WordPress. This enhances security since even if the password is exposed, it does not compromise the admin account.
• Each application password is specifically tied to a single application or service.

Benefits of Using Application Passwords

• Easily connect third-party applications to your WordPress website.
• No need to create additional user accounts or manage complex REST API permissions.
• You can create multiple application passwords, making it easy to control and disable individual passwords when needed.

Instructions for Creating an Application Password in WordPress

Follow these steps to create an application password in WordPress:

Step 1: Log in to your WordPress Admin Dashboard

• Use an account with the Administrator role.
• Some REST API endpoints in the Paid Memberships Pro plugin also support users with the Membership Manager role.

Step 2: Access Your User Profile

• Go to Users > Your Profile in the WordPress dashboard.

Step 3: Locate the "Application Passwords" Section

• Scroll down to the Application Passwords section on your profile page.

Step 4: Create a New Application Password

• Enter a deScriptive name in the New Application Password Name field.
• This name is for internal reference only, such as “API Connection for Product X.”

Step 5: Click the "Add New Application Password" Button

• Once clicked, WordPress will generate an application password.

Step 6: Save the Application Password

• Copy and save the password immediately in a secure location.
• You will not be able to view the password again after leaving the page.

Step 7: Use the Application Password

• Use this password to authenticate with third-party services or applications via the REST API.

Important Notes

• Create a unique password for each application: This allows you to easily disable a specific password for a particular application if necessary.
• If you stop using an application or suspect that the password has been compromised, delete it from the Application Passwords list.