Title: WAP AI Assistant requires HTTPS to use WordPress Application Passwords…
Last modified: August 27, 2026

---

# WAP AI Assistant requires HTTPS to use WordPress Application Passwords…

 *  [PlanetThoughts](https://wordpress.org/support/users/opalcomp/)
 * (@opalcomp)
 * [1 week, 1 day ago](https://wordpress.org/support/topic/wap-ai-assistant-requires-https-to-use-wordpress-application-passwords/)
 * My WordPress website [http://www.insightandenergy.com](http://www.insightandenergy.com)
   started showing the following in the admin section:
 * **WAP AI Assistant** requires HTTPS to use WordPress Application Passwords. The
   AI chat widget will be hidden until this site is served over HTTPS. [Learn more](https://make.wordpress.org/core/2020/11/05/application-passwords-integration-guide/).
 * The site is fully SSL, and I already put in code in wp-config.php that would 
   work for proxy servers.
   The site runs WP Rocket with caching and with WP Rocket’s
   CDN, uses Wordfence (obviously), and RSS (Really Simple Security) and .htaccess/
   web.config to force SSL, which has worked for years already. I don’t know where
   this warning originates from, since the site is using HTTPS already.
 * TIA!

Viewing 1 replies (of 1 total)

 *  Plugin Support [wfmargaret](https://wordpress.org/support/users/wfmargaret/)
 * (@wfmargaret)
 * [3 days, 4 hours ago](https://wordpress.org/support/topic/wap-ai-assistant-requires-https-to-use-wordpress-application-passwords/#post-19008683)
 * Hi [@opalcomp](https://wordpress.org/support/users/opalcomp/),
 * Thanks for reaching out! That notice isn’t generated by Wordfence, but it’s possible
   Wordfence is involved.
 * Wordfence disables WordPress application passwords by default, via the “Disable
   WordPress application passwords” option in Wordfence > All Options > Brute Force
   Protection. You can find more information on that option here: [https://www.wordfence.com/help/firewall/brute-force/](https://www.wordfence.com/help/firewall/brute-force/)
 * Set that option to OFF, save, and reload your admin page. If the WAP AI Assistant
   notice clears, that was it. If it’s still there, it likely isn’t related to Wordfence.
 * Thanks,
   Margaret

Viewing 1 replies (of 1 total)

You must be [logged in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fwap-ai-assistant-requires-https-to-use-wordpress-application-passwords%2F%3Foutput_format%3Dmd&locale=en_US)
to reply to this topic.

 * ![](https://ps.w.org/wordfence/assets/icon.svg?rev=2070865)
 * [Wordfence Security - Firewall, Malware Scan, and Login Security](https://wordpress.org/plugins/wordfence/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wordfence/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wordfence/)
 * [Active Topics](https://wordpress.org/support/plugin/wordfence/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wordfence/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wordfence/reviews/)

 * 1 reply
 * 2 participants
 * Last reply from: [wfmargaret](https://wordpress.org/support/users/wfmargaret/)
 * Last activity: [3 days, 4 hours ago](https://wordpress.org/support/topic/wap-ai-assistant-requires-https-to-use-wordpress-application-passwords/#post-19008683)
 * Status: not resolved