Jeff Starr

<p>Does one thing: disables the “Application Passwords” feature.</p>
<p>Activate this plugin to completely disable the new Application Passwords functionality (added in WP version 5.6). To re-enable Application Passwords, simply deactivate the plugin.</p>
<p><strong>Features</strong></p>
<ul>
<li>Lightweight – only one line of code.</li>
<li>Simple to use – activate and done.</li>
<li>No settings to worry about.</li>
<li>Easy peasy.</li>
</ul>
<p><strong>Why is this useful?</strong></p>
<p>Because not every website is the same. Not every website needs this feature. Also disabling application passwords helps to limit unnecessary exposure and eliminate unwanted functionality (i.e., bloat). Whatever the reason, it is your choice. That’s the beauty of WordPress. So if, for whatever reason, you decide that application passwords should be disabled, this plugin will do it with a click.</p>
<p><strong>More infos</strong></p>
<p>For more information about the new Application Passwords feature:</p>
<ul>
<li><a href="https://make.wordpress.org/core/2020/11/05/application-passwords-integration-guide/" rel="nofollow ugc">Application Passwords: Integration Guide</a></li>
<li><a href="https://perishablepress.com/wordpress-disable-application-passwords/" rel="nofollow ugc">Free Plugin: Disable Application Passwords</a></li>
</ul>
<p><strong>Privacy</strong></p>
<p>This plugin does not collect or store any user data. It does not set any cookies, and it does not connect to any third-party locations. Thus, this plugin does not affect user privacy in any way.</p>
<p>Disable Application Passwords is developed and maintained by <a href="https://x.com/perishable" rel="nofollow ugc">Jeff Starr</a>, 15-year <a href="https://plugin-planet.com/" rel="nofollow ugc">WordPress developer</a> and <a href="https://books.perishablepress.com/" rel="nofollow ugc">book author</a>.</p>
<p><strong>Support development</strong></p>
<p>I develop and maintain this free plugin with love for the WordPress community. To show support, you can <a href="https://monzillamedia.com/donate.html" rel="nofollow ugc">make a donation</a> or purchase one of my books:</p>
<ul>
<li><a href="https://wp-tao.com/" rel="nofollow ugc">The Tao of WordPress</a></li>
<li><a href="https://digwp.com/" rel="nofollow ugc">Digging into WordPress</a></li>
<li><a href="https://htaccessbook.com/" rel="nofollow ugc">.htaccess made easy</a></li>
<li><a href="https://wp-tao.com/wordpress-themes-book/" rel="nofollow ugc">WordPress Themes In Depth</a></li>
<li><a href="https://books.perishablepress.com/downloads/wizards-collection-sql-recipes-wordpress/" rel="nofollow ugc">Wizard’s SQL Recipes for WordPress</a></li>
</ul>
<p>And/or purchase one of my premium WordPress plugins:</p>
<ul>
<li><a href="https://plugin-planet.com/bbq-pro/" rel="nofollow ugc">BBQ Pro</a> – Blazing fast WordPress firewall</li>
<li><a href="https://plugin-planet.com/blackhole-pro/" rel="nofollow ugc">Blackhole Pro</a> – Automatically block bad bots</li>
<li><a href="https://plugin-planet.com/banhammer-pro/" rel="nofollow ugc">Banhammer Pro</a> – Monitor traffic and ban the bad guys</li>
<li><a href="https://plugin-planet.com/ga-google-analytics-pro/" rel="nofollow ugc">GA Google Analytics Pro</a> – Connect WordPress to Google Analytics</li>
<li><a href="https://plugin-planet.com/head-meta-pro/" rel="nofollow ugc">Head Meta Pro</a> – Ultimate Meta Tags for WordPress</li>
<li><a href="https://plugin-planet.com/simple-ajax-chat-pro/" rel="nofollow ugc">Simple Ajax Chat Pro</a> – Unlimited chat rooms</li>
<li><a href="https://plugin-planet.com/usp-pro/" rel="nofollow ugc">USP Pro</a> – Unlimited front-end forms</li>
</ul>
<p>Links, tweets and likes also appreciated. Thank you! 🙂</p>


Disable Application Passwords

Jeff Star at Perishable Press has done it again. If you're new to his stuff, you definitely need to take a closer look. Thanks for this plugin! I just installed it on all of my sites.

Another Exceptional Plugin

Activate this plugin to disable the Application Passwords feature that was added in WP v5.6.

Michael Finkenberger

<p><strong>WP Access Control Center</strong> is a powerful security control center for WordPress administrators who want full control over authentication, sessions, and password policies.</p>
<p>Take control of your site’s access layer with real-time session monitoring, flexible two-factor authentication, and powerful emergency tools — all in one place.</p>
<h3>🔐 Two-Factor Protection</h3>
<ul>
<li>Email-based verification codes</li>
<li>TOTP support (Google Authenticator, Microsoft Authenticator, Authy, etc.)</li>
<li>Role-based enforcement</li>
<li>Grace periods for smooth rollout</li>
<li>Backup codes for account recovery</li>
<li>Trusted devices to reduce login friction</li>
</ul>
<h3>👁️ Live Session Control</h3>
<ul>
<li>Real-time overview of all active sessions (AJAX-powered)</li>
<li>Inspect session details and parameters</li>
<li>Instantly terminate individual or all sessions</li>
<li>Monitor user activity as it happens</li>
</ul>
<h3>🔑 Password Policies</h3>
<ul>
<li>Enforce password strength requirements</li>
<li>Prevent password reuse</li>
<li>Define role-based password expiration</li>
<li>Real-time feedback during password creation</li>
</ul>
<h3>⚡ Bulk Password Reset</h3>
<ul>
<li>Reset passwords for roles or selected users</li>
<li>Optionally terminate related sessions</li>
<li>Automatic email notifications (fully customizable)</li>
</ul>
<h3>🔄 Security Key Rotation</h3>
<ul>
<li>One-click regeneration of WordPress KEYs & SALTs</li>
<li>Immediately invalidates all active sessions</li>
<li>Essential for incident response</li>
</ul>
<h3>⏱️ Advanced Session Control</h3>
<ul>
<li>Configure session lifetime per role</li>
<li>Separate rules for “Remember Me”</li>
<li>Automatic cleanup of expired sessions</li>
</ul>
<h3>🎨 Login Experience Designer</h3>
<ul>
<li>Customize the 2FA login page</li>
<li>Background images (outer & inner)</li>
<li>Flexible CSS customization</li>
<li>Safe defaults – no changes unless configured</li>
</ul>
<p><strong>No external services required.</strong> Everything runs locally within your WordPress installation.</p>


WP Access Control Center

Take full control over authentication, sessions, and password security in WordPress – including real-time session monitoring, 2FA, and emergency tools

Disable Application Passwords vs WP Access Control Center