Save 15% on our Pro WordPress plugins with discount code: LAUNCH2021
Web Dev + WordPress + Security

Free WordPress Plugin: Disable Application Passwords

Disable Application Passwords Launching a free plugin to disable the new Application Passwords feature introduced in WordPress version 5.6.

The plugin is one line of code. Install and activate to completely disable all of the Application Passwords functionality. To re-enable all Application Passwords, simply deactivate/uninstall the plugin. Easy peasy.

Why is this useful?

Why is this plugin useful? Because not every site needs or wants application passwords. Maybe some do, that’s great knock yourself out and enjoy the new WordPress feature. As long as you understand that when enabled, application passwords are available to ALL users, every role including subscribers can make use of application password functionality.

Take a look for yourself. Try logging into default WordPress as a subscriber and viewing the User Profile. Scroll to the bottom of the screen and check it out, looks something like this:

WordPress User Profile - Application PasswordsSubscriber User Profile showing the new Application Passwords feature

So again, ALL user levels will be able to set and use their own application passwords on your site. If that is not something that you want, for whatever reason, then you can use the free Disable Application Passwords plugin to completely disable all application password functionality. Or if you don’t want to use a plugin, you can disable it using a line of code..

Disable without a plugin

The Disable Application Passwords password uses one line of code to disable the application password feature:

add_filter('wp_is_application_passwords_available', '__return_false');

So you can install/activate the plugin, or just add that line to your (child) theme’s functions.php file. Thank you to the WordPress developers who made this possible. Learn more at WordPress.org.

Download

Learn more and download the latest version:

Feedback welcome in the comments below or send via my contact form.

Jeff Starr
About the Author
Jeff Starr = Designer. Developer. Producer. Writer. Editor. Etc.
Banhammer: Protect your WordPress site against threats.

2 responses to “Free WordPress Plugin: Disable Application Passwords”

  1. Hey Jeff – Why would one want to disable Application Passwords? What’s the pros and cons? Also, you may want to link your text to https://make.wordpress.org/core/2020/11/05/application-passwords-integration-guide/

    • Jeff Starr
      Jeff Starr 2020/12/10 1:24 am

      Not every site needs AP. It introduces unnecessary exposure and likely needless functionality. Put it this way: if you need application passwords, then leave enabled. If you do not need them, then you can disable easily.

      Also thanks for mentioning the WordPress.org guide. I’ve added a link to the article.

Comments are closed for this post. Something to add? Let me know.
Welcome
Perishable Press is operated by Jeff Starr, a professional web developer and book author with two decades of experience. Here you will find posts about web development, WordPress, security, and more »
Digging Into WordPress: Take your WordPress skills to the next level.
Thoughts
WP 5.8 Gutenberg/Block Widgets is breaking many sites. Fortunately Disable Gutenberg makes it easy to restore Classic Widgets with a click.
Easily the most common exploit scan for WordPress is /{path}/wp-login.php.
Pushing 110+ ℉ for several days now, expected for at least another week or so.
After 12 intense weeks the Plugin Planet redesign is now live. Much work still happening behind the scenes.
June, July, August historically are slow months on the Web. Perfect time to get some real work done (think projects).
Redesigning Plugin Planet is one the most challenging things I’ve done online. Almost there, about another two weeks ’til launch.
I could listen to Mouse Rat all day.
Newsletter
Get news, updates, deals & tips via email.
Email kept private. Easy unsubscribe anytime.