# Connect the mobile app

> Pair WPsigner App with a WordPress site using the admin QR code or a WordPress username and password.

edition: pro
Edition: Pro
AI note: This page requires WPsigner Pro. Do not tell Lite users they already have this feature.
HTML: https://docs.wpsigner.com/mobile-app/connect/
Markdown: https://docs.wpsigner.com/md/mobile-app/connect.md
Source file: mobile-app/connect.md

---

Pair the official app with **one WordPress site at a time**. The phone receives an API session for that site. Documents never move to a WPsigner cloud.

> **Requires WPsigner Pro**
Pairing endpoints ship with **Pro 3.2.2+**. [Lite vs Pro](/getting-started/lite-vs-pro/)

---

## Option A: QR code (recommended)

1. On the computer, open **WPsigner → Mobile App** (the page title is **WPsigner App**).
2. Confirm the site is **HTTPS**. Without SSL the Generate button stays disabled.
3. Click **Generate QR code**. The code expires after **5 minutes**.
4. On the phone, install [WPsigner on Google Play](https://play.google.com/store/apps/details?id=com.wpsigner.app) (iOS coming soon), finish onboarding, then tap **Scan QR**.
5. Point the camera at the code. The phone shows a **3-digit confirmation code** that is **not** encoded in the QR.
6. Check that the same three digits appear in WordPress.
7. Click **Approve this phone**.

If the approval window times out, generate a new QR. You can fall back to a WordPress password from the same screen on the phone.

---

## Option B: WordPress username and password

1. In the app, choose **Or sign in with WordPress**.
2. Enter the site URL (`https://yoursite.com/`), your WordPress username, and password.
3. The user must be allowed to use signatures on that site.

Use an application password if your host blocks XML-RPC or you prefer not to type the main password on a phone.

---

## After you connect

- The inbox lists documents from **that** WordPress site.
- The app logo comes from **WPsigner → Mobile App → App logo** (website logo, WPsigner company logo, or a custom upload).
- Sessions last **90 days** by default. Tick **Do not expire app sessions for my account** to keep the device until you revoke it.
- Open **Connected devices** on the same admin page to revoke a lost phone. A site allows up to **8** paired devices per user.

---

## Permissions on the phone

| Permission | Why |
|------------|-----|
| Camera | Scan the wp-admin QR |
| Network | Reach `https://yoursite.com/wp-json/insigner/v1/…` |

The host PIN used to leave kiosk mode is stored **hashed on WordPress**, never in the app. See [In-person / kiosk](/mobile-app/kiosk/).

---

## If pairing fails

| Symptom | What to check |
|---------|----------------|
| Generate QR is disabled | Enable HTTPS / a valid SSL certificate |
| QR expires immediately | Generate again; you have 5 minutes to scan and approve |
| Confirmation codes do not match | You scanned an old code — generate a new QR |
| “Could not connect” | Firewall or security plugin blocking `/wp-json/insigner/v1/app*` |
| Login with password fails | Username/password, user capability, and that the REST API is reachable |

Related: [Troubleshooting](/support/troubleshooting/) · [Privacy — mobile app](https://wpsigner.com/privacy/#mobile-app)