Title: Enable XML-RPC with Clef
Last modified: August 30, 2016

---

# Enable XML-RPC with Clef

 *  Resolved [morrisjackson](https://wordpress.org/support/users/morrisjackson/)
 * (@morrisjackson)
 * [10 years, 10 months ago](https://wordpress.org/support/topic/enable-xml-rpc-with-clef/)
 * Hi,
 * I have started using Clef on a few of my websites and am really loving it.
 * Problem is I cannot use third-party applications to post to my WordPress blog
   if I disable password for registered Clef users or even the admin (myself)
 * If I enable password, it is no longer 2 factor authentication. I’d rather stick
   with Clef than move to something like Google Authenticator.
 * Any pointers on how to use password for third-party tools and keep the 2 factor
   authentication going?
 * Thanks,
 * Morris
 * [https://wordpress.org/plugins/wpclef/](https://wordpress.org/plugins/wpclef/)

Viewing 4 replies - 1 through 4 (of 4 total)

 *  Plugin Contributor [inthylight](https://wordpress.org/support/users/inthylight/)
 * (@inthylight)
 * [10 years, 10 months ago](https://wordpress.org/support/topic/enable-xml-rpc-with-clef/#post-6285500)
 * Hey Morris,
 * If you turn on passwords for the API on the Clef settings page, you should be
   good to go. See [http://support.getclef.com/article/60-recommended-password-settings-for-clef-wordpress-plugin](http://support.getclef.com/article/60-recommended-password-settings-for-clef-wordpress-plugin)
   for details.
 *  [pingram](https://wordpress.org/support/users/pingram3541/)
 * (@pingram3541)
 * [10 years, 8 months ago](https://wordpress.org/support/topic/enable-xml-rpc-with-clef/#post-6285552)
 * So does this mean if we don’t use these apps and we don’t enable the API there
   is no need for an additional plugin like “Disable XML-RPC” since wp3.5+ got rid
   of the option to disable this in the settings? Or is it a good idea to still 
   use that plugin as well?
 *  Plugin Contributor [inthylight](https://wordpress.org/support/users/inthylight/)
 * (@inthylight)
 * [10 years, 8 months ago](https://wordpress.org/support/topic/enable-xml-rpc-with-clef/#post-6285553)
 * Hi Morris,
 * The short answer is no, the two are not equivalent. The former effectively disables
   all xml-rpc functions that require username and password parameters (which is
   most but not all). The latter removes xml-rpc functionality entirely (i.e., turns
   the whole thing off).
 * Whether it’s a good idea to run the latter depends on how tight/restricted you
   like to run your ship and whether you’re comfortable removing pingbacks/trackbacks.
 *  [pingram](https://wordpress.org/support/users/pingram3541/)
 * (@pingram3541)
 * [10 years, 8 months ago](https://wordpress.org/support/topic/enable-xml-rpc-with-clef/#post-6285554)
 * Thanks for the clarification, very helpful.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Enable XML-RPC with Clef’ is closed to new replies.

 * ![](https://s.w.org/plugins/geopattern-icon/wpclef_4ab6e4.svg)
 * [Clef Two-Factor Authentication](https://wordpress.org/plugins/wpclef/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wpclef/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wpclef/)
 * [Active Topics](https://wordpress.org/support/plugin/wpclef/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wpclef/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wpclef/reviews/)

## Tags

 * [XML-RPC](https://wordpress.org/support/topic-tag/xml-rpc/)

 * 4 replies
 * 3 participants
 * Last reply from: [pingram](https://wordpress.org/support/users/pingram3541/)
 * Last activity: [10 years, 8 months ago](https://wordpress.org/support/topic/enable-xml-rpc-with-clef/#post-6285554)
 * Status: resolved