Connect Wordpress

WordPress connects with your site URL, your WordPress username, and an application password created under Users, Profile, Application Passwords. The NarraSEO Bridge plugin is recommended for SEO metadata sync.

Last updated 1 day ago

WordPress uses an application password, which is a WordPress feature designed for exactly this. It is not your login password, and it can be revoked without changing your own credentials.

Available on every plan.

What you Need

  • A WordPress site with /wp-json reachable.
  • A WordPress account that can publish posts.
  • An application password.

Step 1: Create an Application Password

In wp-admin, open Users → Profile → Application Passwords. Create one named NarraSEO and copy the password.

Copy it immediately. WordPress shows it once. It looks like six blocks of four characters, and you can paste it with or without the spaces.

Step 2: Enter the Credentials

  1. Open Sidebar → Integrations.
  2. Find WordPress under Publishing & CMS.
  3. Fill in the three fields:

Field

What to enter

WordPress Site URL

Your public site address, for example https://example.com

Username

Your WordPress login username, not your email address, unless your site accepts email logins

Application Password

The password from step 1

  1. Select Connect WordPress.

Step 3: Verify

Select Verify connection. On success you see "WordPress connection verified."

If it fails you see "Could not verify the WordPress connection. Check your site address, username, and application password."

Recommended, not required. It enables SEO metadata sync and connection health checks.

Without it, publishing works but your meta title and description are less likely to land in the fields your SEO plugin reads. Install it if you rely on those.

Publishing Options

WordPress has the most control of any integration.

  • Post status: Draft, Published, or Scheduled.
  • Publish date when scheduling.
  • Author, with the placeholder "Choose an author".
  • Category, with "Choose a category".
  • Featured image: Thumbnail only, or Image in body.
  • Article title: CMS title, or Title in body.

If it Will Not Connect

Check /wp-json loads. Open https://yoursite.com/wp-json in a browser. If it does not return data, the REST API is blocked and nothing else will work.

Security plugins and Cloudflare are the usual cause. Wordfence, iThemes Security, and similar plugins often block the REST API or application passwords by default. Allow REST API access, or allowlist it.

Use the username, not the email. This is the most common single mistake.

Check the site URL. Use the public address, matching your actual setup on www and https.

Confirm application passwords are enabled. Some hosts and security plugins disable the feature. If the section is missing from your profile, that is why.

Check the account can publish. A Contributor cannot publish posts.

Notes

Application passwords can be revoked in WordPress at any time, which immediately stops NarraSEO publishing. Revoking is the right response if credentials are ever exposed.

The connection is per project.

WordPress.com hosted sites differ from self-hosted WordPress in which plans expose the REST API. Self-hosted and Business-tier hosted sites are the reliable cases.