Connection guide

Connect WordPress

The most common setup. We need your site URL, your WordPress username, and an application password — WordPress's own mechanism for scoped API access you can revoke anytime without touching your real password. No plugin, no theme edits.

Exactly what we need

Your site URL (e.g. https://yoursite.com).
Your WordPress username.
A WordPress application password — this is NOT your login password.

The important bit

An application password is not your login password. It is WordPress's own feature for giving one app limited, revocable access — you can delete it anytime from the same screen and your real password never changes.

Click by click

1In wp-admin, open Users → Profile (on some sites, Users → Your Profile).
2Scroll to Application Passwords, type the name BloggerClinic, and click Add New Application Password.
3Copy the generated password exactly, spaces and all — WordPress shows it only once.
4In the Integrations step of onboarding (or Site settings), choose WordPress and paste your site URL, your username, and that application password.

What we do not get — and how to revoke it

We never receive or store your real WordPress login password.
The access only lets us create posts and upload their images — nothing else on your site.
Revoke it anytime in Users → Profile → Application Passwords; it stops working immediately.

Where to paste it

In our dashboard: My sites → CMS credentials → choose WordPress, then paste your URL, username, and the application password, and click Verify & save.

What happens next

We check the credentials against your site right away. Once it reads Verified, we can push drafts to your CMS (or publish live, only if you turn auto-publish on) — and you approve every post before anything goes out.

Get your SEO titles to apply

One SEO tip: connecting needs no plugin, but for your posts' SEO titles and meta descriptions to actually apply, install Yoast SEO (free) — WordPress on its own discards them. Install Yoast specifically: Rank Math looks fine but doesn't expose its SEO fields to the WordPress API, so it silently drops the titles and descriptions we send.

How your credentials are kept

Everything you paste is stored encrypted and only ever shown back to you as a masked hint. Nothing needs your main password, and you can revoke our access from your own account at any time — a rotated credential fails loudly in your dashboard, never silently.

Need help connecting?

Send us a message and we'll reply by email. Or have us do the walk-through with you.