What You Need
Site URL
Your WordPress root domain (e.g. https://yoursite.com)
Admin Username
Your WordPress login username
Application Password
A special API password (not your login password)
1Generate an Application Password
WordPress Application Passwords are separate credentials specifically for API access — you must use one of these, not your regular login password.
- a
Log in to WordPress Admin
Go to
https://yoursite.com/wp-adminand sign in. - b
Open your Profile
In the left sidebar go to Users → Profile (or Users → All Users, click your user, then Edit).
- c
Find Application Passwords
Scroll to the bottom of the page to the Application Passwords section.
- d
Create a new password
Enter a name like CocoSEO in the New Application Password Name field and click Add New Application Password.
- e
Copy the password immediately
WordPress displays it once (e.g.
AbCd EfGh IjKl MnOp QrSt UvWx). Copy it now — it will not be shown again.
Don't see Application Passwords? This feature requires WordPress 5.6+ and HTTPS. Some security plugins (e.g. Wordfence) may disable it — check your plugin settings or contact your host.
2Fill in the Integration Form
Enter these values in the WordPress configuration fields in CocoSEO.
Site URL
Your WordPress root domain with https://. Do not include any path like /wp-login.php.
https://topsoftwareoffers.comhttps://topsoftwareoffers.com/wp-login.phpUsername
Your WordPress admin username — the same one you use to log in (e.g. admin or john). Find it under WP Admin → Users.
Application Password
Paste the Application Password from Step 1. Spaces are fine.
Do not use your regular WordPress login password here — it will not work for API access.
3Test & Enable
Save the integration, then click the Test Connection button (flask icon) on the integration card to verify everything works.
If the test passes, enable Auto-publish to have new blog posts automatically sent to WordPress when generated.
You can also manually publish individual articles from the Articles page using the Publish button.
Troubleshooting
HTML or non-JSON response error
- Make sure Site URL uses
https://(not http://) - Remove any path — use the root domain only
- Check if a security plugin is blocking the REST API
401 Unauthorized
- Verify the username under WP Admin → Users
- Regenerate a fresh Application Password and update the integration
- Confirm you are not using your regular login password
Application Passwords section not visible
- Requires WordPress 5.6+
- Requires HTTPS — disabled on HTTP sites
- Check plugins like Wordfence or iThemes Security for REST API restrictions
Requirements
- WordPress 5.6 or later
- Site accessible over HTTPS
- WordPress REST API enabled (default on all modern WP installs)
- User account with Editor or Administrator role