What is the WordPress Application Passwords feature (5.6+) and what security model does it implement?

Question

WordPress Fundamental — Hard

What is the WordPress Application Passwords feature (5.6+) and what security model does it implement?

Accepted Answer

WordPress Application Passwords allow users to generate unique passwords for specific applications like REST API and XML-RPC. These passwords are scoped to user permissions, can be revoked individually, and provide granular access control via HTTP Basic Auth.