Connect a website
Connect a WordPress website
Install the SiteHome plugin, create an application password, connect.
SiteHome lets the people who manage a website edit and publish its content from their phone. For a WordPress website you need an application password to connect; with it you can view and edit content and save drafts. To publish, SiteHome also needs the SiteHome plugin, which you can install before connecting or later. Both are done in WordPress's own admin, without a developer, in about five minutes.
1. Install the plugin
- In WordPress, go to Plugins → Add Plugin and search for SiteHome (by bkeetman).
- Click Install Now, then Activate.
SiteHome is available in the WordPress.org plugin directory. Requires WordPress 6.0 and PHP 7.4 or newer. You can also download the ZIP from that page and use Upload Plugin.
With WP-CLI: wp plugin install sitehome --activate.
Updates
WordPress shows an update notice under Plugins or Dashboard → Updates when a newer version is available. Choose Check again to refresh the check. To install future updates automatically, choose Enable auto-updates next to SiteHome under Plugins; your host may manage this setting.
2. Create an application password
- Use a WordPress user with the Editor role (or Administrator) for SiteHome: your own user, or a new one.
- Go to Users → Profile and scroll to Application Passwords.
- Enter the name
SiteHome, click Add Application Password, and copy the password.
Application passwords only work over https. You can revoke the password there at any time; SiteHome then can no longer read or change the website.
3. Connect in SiteHome
Under Settings → SiteHome in WordPress, choose Connect with SiteHome (plugin 0.7.0 or newer). SiteHome opens with the website address filled in; sign in if needed. With an older plugin, open Connect website → WordPress in the SiteHome app. Enter your website's address, the username and the application password. SiteHome checks the user's role and whether the plugin is there, shows the content types with published items, and connects the ones you choose. Publishing starts switched off until an administrator switches it on. Without the plugin the website shows as partly connected (yellow): switching publishing on checks the website for the plugin again first.
What the plugin does
- A revision check on SiteHome's updates: if an item changed after it was reviewed in SiteHome, WordPress refuses the update (409) and SiteHome asks for a new review. Updates from the block editor or other apps are not affected.
- A read-only
sitehome_revisionfield on items in the REST API (only for users who may edit them), andGET /wp-json/sitehome/v1/status. - Settings → SiteHome with these connection steps.
- It adds no tables, changes no content and makes no outgoing requests. SiteHome reads and publishes through WordPress's normal REST API, with your users and rights. Every change is a normal update with a revision you can restore.
What SiteHome edits
Published posts, pages and custom post types that show in the REST API (show_in_rest): the title, the excerpt, the featured image, the block content, and the categories, tags and other taxonomies (chosen from the website's existing terms). In the content, paragraphs, headings, quotes and lists can be edited, with bold, italic, strikethrough, inline code and links. Other blocks (images, buttons, columns, embeds, blocks with their own settings such as alignment or colours) are shown and can be moved or removed, but are written back exactly as they were.
With the plugin (0.4.0 or newer), SiteHome also edits Advanced Custom Fields (ACF) of common types: text, text area, number, email, link, yes/no, date, choices and image. ACF fields with a condition, a read-only setting or a check of the website's own stay closed, as do repeaters, flexible content and relationships.
Not yet edited: the address (slug), new terms (create them in WordPress first), other custom fields, and content from the classic editor. Pages built with a page builder (Elementor, Divi, WPBakery, Beaver Builder, Oxygen, Bricks) keep their layout and text in the page builder's own data; the plugin tells SiteHome, which then leaves the content alone and lets you edit the title, excerpt, featured image, categories and tags.
If connecting does not work
- SiteHome cannot reach the API: a security plugin (such as Wordfence or iThemes Security) or the host blocks the REST API or application passwords. Allow both for the SiteHome user.
- WordPress doesn't accept the details, but they are right: some hosts drop the
Authorizationheader before WordPress sees it, and WordPress then answers as if the password were wrong. The SiteHome plugin (0.3.0 or newer) reads the details from SiteHome's own header instead and tells SiteHome whether they arrived. Without the plugin, ask your host to pass theAuthorizationheader on to PHP. - The username or password is not accepted: use the WordPress username (not the email address) and the application password, not the normal password.
- The user may not edit all content: give the user the Editor or Administrator role.
For developers and AI coding assistants
Custom post types need 'show_in_rest' => true to appear in SiteHome, and supports decides which of title, excerpt, editor and thumbnail SiteHome shows. Install and activate the plugin, then create an application password for an Editor. Do not change other plugins or settings.