BuildWithHumza Application Password Audit
Sessions, last login and site access
Approved and live on WordPress.org, version 1.0.0, published 26 Sep 2026
66 integration tests, 155 assertions, run against a real WordPress install. Plugin Check clean.
View on WordPress.orgWhat it does
One screen under Tools that lists every application password, active login session and user account that can reach your site, with unused and stale access flagged and sorted to the top. Revoke a password or sign a user out from the same screen, or export the report as CSV for a handover.
Why it exists
WordPress keeps application passwords on each user's own profile. On a site with twenty users, checking them means opening twenty profiles, and nothing warns you when a password or an administrator account has gone quiet for months.