BuildWithHumza Application Password Audit
by Mohammad Humza 0 (0 reviews)

BuildWithHumza Application Password Audit

See every application password, active session and user account that can reach your site, with unused and stale access flagged.

BuildWithHumza Application Password Audit ranks #62,023 among WordPress.org plugins with 0+ active installations, and was last updated Sep 26, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1.2
v1.0.0 Current Version v1.0.0
Updated 12 hours ago Last Update on 26 Sep, 2026
Refreshed 6 hours ago Last Refreshed on
Actively maintained
View on WordPress.org
Rank
#62,023
-10104 this week
Active Installs
0+
— No change
KW Avg Position
161
— No change
Downloads
23
— Total downloads
Support Resolved
0%
— No change
Rating
0%
Review 0 out of 5
0 (0 reviews)

Next Milestone 10

Total Progress 10%
0+ 10+
39,791
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 9 more installs to reach 10+

Rank Changes

58,922 60,472 62,023 63,574 65,124 20-09-2026 21-09-2026 22-09-2026 23-09-2026 24-09-2026 25-09-2026 26-09-2026 27-09-2026
58,922 60,472 62,023 63,574 65,124 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026 17-09-2026 18-09-2026 19-09-2026 20-09-2026 21-09-2026 22-09-2026 23-09-2026 24-09-2026 25-09-2026 26-09-2026 27-09-2026
Current #62,023
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

0 50 100 20-09-2026 21-09-2026 22-09-2026 23-09-2026 24-09-2026 25-09-2026 26-09-2026 27-09-2026
0 50 100 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026 17-09-2026 18-09-2026 19-09-2026 20-09-2026 21-09-2026 22-09-2026 23-09-2026 24-09-2026 25-09-2026 26-09-2026 27-09-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

0.0
0 reviews
Overall 0%
5
0 (0%)
4
0 (0%)
3
0 (0%)
2
0 (0%)
1
0 (0%)

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version
1.0.0
Last Updated
Sep 26, 2026
Requires WP
6.0+
Tested Up To
7.1.2
PHP Version
N/A

Support & Rating

Rating
☆ ☆ ☆ ☆ ☆ 0
Reviews
0
Support Threads
0
Resolved
0%

Keywords

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Frequently Asked Questions

Common questions about BuildWithHumza Application Password Audit

It is a separate password used by apps and scripts to reach your site over the REST API, added in WordPress 5.6. It bypasses the normal login form, it does not expire, and changing your account password does not revoke it. That combination is why they are worth auditing.
WordPress core only shows them on each user's individual profile screen. This plugin collects them from every user onto one page under Tools, along with when each was last used.
WordPress does not record login times, so the plugin collects them itself from the moment you activate it. Anyone who has not logged in since then shows that message until they next log in. It is not a claim that they have never logged in.
Revoking one stops whatever was using it, so an integration relying on it will begin to fail. That is usually the intent. Check the last used column first: a password that has never been used is almost always safe to remove.
No. The only thing running on the front end is one timestamp write when somebody logs in. The report is built on demand when you open the page.
An activity log answers "what happened?" This answers "what is true right now?" They complement each other. An activity log will not tell you that an application password created eight months ago has never once been used.
Yes. Use the bwh_apa_stale_login_days and bwh_apa_unused_password_days filters.
It reports on the site you run it from. Network-wide reporting is not in this version.

Sign In / Register

You need to sign in or register to use this feature.