With version 5.6, I got this new weird "Application Passwords" under all user profiles. No idea what it is and what it does except for what it says -- and I want it gone.

If anyone knows how to remove this using __return_false with a filter or something, please tell me. I've googled and looked at the developers handbook and so far; nothing.

See image for more information.

With version 5.6, I got this new weird "Application Passwords" under all user profiles. No idea what it is and what it does except for what it says -- and I want it gone.

If anyone knows how to remove this using __return_false with a filter or something, please tell me. I've googled and looked at the developers handbook and so far; nothing.

See image for more information.

• password
• profiles

• I guess you care more about removing the UI to avoid confusing your users? Or did you want to disable most of the REST API instead? – Rup Commented Dec 20, 2020 at 16:53
• Both. Remove (de-activate) the Applicaion Passwords and as much as possible of the REST API without breaking basic functions. – user199222 Commented Dec 21, 2020 at 6:08

1 Answer 1

Yes, it's wp_is_application_passwords_available to globally disable them:

add_filter( 'wp_is_application_passwords_available', '__return_false' );

or wp_is_application_passwords_available_for_user to turn them on and off by role or individually.