An application password is a password you hand to one app or device instead of your real one. It signs in for that app, and you can revoke it later without touching the password you use everywhere else.

## Before you start

- Be logged in to your site's dashboard.
- Your site needs to use HTTPS — the small padlock next to the address in your browser.

## Steps

### Step 1: Create the password

In the dashboard sidebar, click **Users**, then click **Profile**, and scroll down to the **Application Passwords** section.

In the **New Application Password Name** box, type a name that tells you which app will use it, like `Desktop sync app`. Then click **Add Application Password**.

![Create the password](https://wordpress.supportpages.io/rails/active_storage/blobs/proxy/eyJfcmFpbHMiOnsiZGF0YSI6MTAzNjcsInB1ciI6ImJsb2JfaWQifX0=--e0995f072a4dc3a622fb81d4918d205191efed70/block_open-profile.png)

### Step 2: Save the password

WordPress shows the new password once, just above the list. Click **Copy**, then paste it into the app or device you're setting up.

Put it somewhere safe before you move on — once you dismiss this message, the password can't be shown again.

![Save the password](https://wordpress.supportpages.io/rails/active_storage/blobs/proxy/eyJfcmFpbHMiOnsiZGF0YSI6MTAzNjYsInB1ciI6ImJsb2JfaWQifX0=--e8706903bd822c856dc410cee0fe7f0535933a91/block_copy-password.png)

### Step 3: Revoke it when you no longer need it

Every password you've created stays in the list below, with the date it was **Created** and when it was **Last Used**.

To disconnect an app or device, find its name in the list and click **Revoke**. Confirm the prompt and that app can no longer sign in — your main password is unchanged.

![Revoke it when you no longer need it](https://wordpress.supportpages.io/rails/active_storage/blobs/proxy/eyJfcmFpbHMiOnsiZGF0YSI6MTAzNjgsInB1ciI6ImJsb2JfaWQifX0=--92d8aed1ca89243d9c67620a23de02a0f2471459/block_revoke-password.png)

## Tips

- Give each app its own application password, so you can disconnect one device without affecting the others.
- Check the **Last Used** and **Last IP** columns to see whether a password is still in use before you revoke it.

## Summary

You've created a separate password for an app or device. Come back to **Users** → **Profile** any time to add another one or revoke one you're finished with.