WordPress Application Passwords: Safer Credentials for Publishing Tools
Use separate revocable API credentials, suitable account permissions, HTTPS, secure storage, and a tested revocation plan.
Hackbitez journal
Use separate revocable API credentials, suitable account permissions, HTTPS, secure storage, and a tested revocation plan.