Skip to main content

​
About WordPress

WordPress 5.6+ supports Application Passwords for REST clients. Iru calls https://YOUR_HOST/wp-json/... with HTTP Basic (username + application password). HTTPS is required - Application Passwords are rejected over plain HTTP.

​
How It Works

Authorization: Basic base64(username:application_password)
DetailValue
CategoryCMS
AuthenticationBasic (Application Password)
Self-hosted 5.6+ or WordPress.com Personal+ (Free tier does not expose Application Passwords per product limits). Official references: Application Passwords, REST API.

​
Prerequisites

  • Administrator (or role that may issue Application Passwords).
  • /wp-json reachable and not blocked by security plugins.

​
Connect WordPress to Iru

Complete this tab before you connect the source in Compliance.
1

Sign in to WordPress admin

Open https://YOUR_HOST/wp-admin and sign in with a user who can edit Users and create Application Passwords (often an Administrator).
2

Open Users

In the left admin menu, select Users → All Users, then click the user Iru will authenticate as (often a dedicated service account).
3

Open Profile

Select Edit (or Profile) for that user to open the profile screen.
4

Open Application Passwords

Scroll to the Application Passwords section (WordPress 5.6+). If it is missing, confirm the site allows Application Passwords and is served over HTTPS.
5

Create a new Application Password

Enter a name such as Iru Compliance, then select Add New Application Password (or Add). WordPress generates a spaced token.
6

Copy the token once

Copy the full application password string once. You may paste it into Iru with or without spaces; WordPress accepts both forms.
Continue on the Iru Compliance tab.

​
Troubleshooting

Check pop-up blocker settings for the Iru site and try again.
Correct password; plugin not blocking REST.
Security plugins - allow wp-json.
Enable TLS.

Sources Management

Browse and manage every Compliance source.

Getting Started With Compliance

Frameworks, actions, and Artifacts.

Iru Overview

How Endpoint, Compliance, and Identity fit together.

Artifacts Management

Upload, review, and organize evidence from sources and actions.