A WordPress Application Password allows SmartCity Growth (grow.infusionics.com) to authenticate securely with your WordPress REST API without sharing or exposing your main administrative login credentials. You can revoke it at any time with a single click.
Since WordPress version 5.6, native REST API Application Passwords provide a secure, isolated channel for remote applications to publish and manage content. Unlike your primary user password:
wp-login.php web screen).Figure 1: WordPress Admin Profile page displaying the Application Passwords section, input field, and copy token modal.
Before generating your token, ensure your website meets two basic requirements:
https://yourdomain.com) to transmit authentication headers securely. If your site is only HTTP, Application Passwords are automatically disabled by WordPress security policies.
Navigate to your website's admin login screen (typically https://yourdomain.com/wp-admin) and sign in using an account with Administrator or Editor privileges so the automation has permission to publish posts.
In the left-hand WordPress admin menu, click on Users → Profile (or if you are editing another user account, go to Users → All Users and click Edit on the desired user).
Scroll all the way down near the bottom of your profile page until you find the section titled Application Passwords.
If this section is missing, your site may not have an active SSL certificate (check that your address starts with https://), or a security plugin (such as Wordfence, iThemes Security, or Defender) may have checked an option to "Disable Application Passwords". Simply re-enable it in your security plugin settings.
In the New Application Password Name text input box, enter a recognizable identifier so you know what it is used for. Good examples:
SmartCity Growth Automationgrow.infusionics.com
Click the blue Add New Application Password button. WordPress will immediately generate a 24-character random password string formatted in four groups of 4 or 6 characters separated by spaces (for example: abcd efgh ijkl mnop qrst uvwx).
WordPress will only display this password once. Copy it immediately to your clipboard or a secure notepad. You will not be able to view it again after leaving the page. (Spaces in the password can be kept or removed; both work).
Now return to your SmartCity Growth dashboard at grow.infusionics.com:
https://yourdomain.com (must include https://).
Our platform will execute a lightweight GET /wp-json/wp/v2/users/me test. Once verified, you will see a green confirmation badge: ✓ WordPress Connected (Publishing Ready).
| Error / Symptom | Root Cause | Solution |
|---|---|---|
| 401 Unauthorized | Incorrect username or mistyped application password. | Verify username case-sensitivity and generate a fresh Application Password. |
| 403 Forbidden | User role is set to Subscriber or Contributor without publish rights. | Promote the user to Editor or Administrator in WordPress Users settings. |
| Authorization Header Stripped | Apache or Nginx server dropping the HTTP Authorization header. | Add SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1 to your .htaccess file. |
| Endpoint Not Found (404) | WordPress permalinks are set to Plain (e.g. ?p=123). |
Go to Settings → Permalinks and change to "Post name", then click Save Changes. |
No. SmartCity Growth only creates new blog drafts or publishes designated autonomous articles. It never edits or modifies your existing manual content unless you explicitly select an article to enhance.
Yes! In your website settings in SmartCity Growth, you can choose whether the automation publishes directly as Published or saves articles as Draft in WordPress so your editorial team can review them first.
Drop your website URL into SmartCity Growth and let our multi-model AI handle autonomous keyword research, content drafting, and search engine indexing.
Start Your 14-Day Free Trial →Stop suffering unexpected service outages, scalability bottlenecks, and slow release cycles. Partner with Enterprise Growth (grow.infusionics.com) to deploy high-throughput cloud architectures, automated CI/CD pipelines, and 99.99% system reliability.
Whether you need a high-converting website build, speed optimization, or custom 24/7 AI Chatbot agents, our team delivers production-ready systems tailored to your business.
Request a Free Consultation & Quote →Online 24/7 • Real-Time Quotes & Proposals