Application Passwords broken with or without WordFence

  • markwill

    (@markwill)


    1 year ago

    I have had an app password in place for a while, for use with Make. I recently installed WordFence and noticed that WordFence disables app passwords. However, even if I disable that in WordFence I am not able to edit the password.

    Specifically, if I have WordFence activated and have enabled the option to disable app passwords then I see a message on the user profile that app passwords are disabled. This is as expected.

    However, if I disable that option or even deactivate WordFence then there is no option to create an app password in the user profile. The Application Password section is simply not there. The only way to see the Application Password section, on a user profile, is to activate WordFence AND enable the “Disable Application Password…” option. But then, of course, I can’t use app password.

    I do not understand why the app password section is not visible, even when WordFence is deactivated.

    How can I get WordFence out of the way here?

Viewing 4 replies - 1 through 4 (of 4 total)
  • Thread Starter markwill

    (@markwill)

    Here is what I see when app passwords are disabled in WordFence. This is as expected.

    https://app.screencast.com/zCDDw58a4KYps

    Thread Starter markwill

    (@markwill)

    And here’s what I see when I disable that option – no ability to edit app passwords.

    https://app.screencast.com/4216thADi88ad

    Plugin Support wfpeter

    (@wfpeter)

    Hi @markwill, thanks for reaching out.

    I’ve attempted to recreate the issue, as I’m naturally happy to be on the lookout for bugs or features that need addressing, but I can’t replicate it.

    When disabling Wordfence while “Disable WordPress Application Passwords” is checked, I still see the input for “Add New Application Password” on the user profile page along with the table of preexisting APs. The same applies for when Wordfence is disabled without Application Passwords disabled. I did choose to keep all Wordfence tables and data during this process.

    Does the disabling of any other/all plugins cause the section to return? If not, any browser console script errors you’re seeing may also be helpful in this case.

    Many thanks,
    Peter.

    Thread Starter markwill

    (@markwill)

    With apologies for the delay, I think I found the problem. It turns out that another security-related service ALSO had an option to disable app passwords (but, unfortunately, doesn’t indicate when it has disabled them, like WordFence does). So, that’s the explanation and I am sorry for the false alarm.

    Thank you for your help.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Application Passwords broken with or without WordFence’ is closed to new replies.