Two WordPress connection methods
Self-hosted WordPress sites can use application passwords. WordPress.com or Jetpack-connected sites can use OAuth.
Credentials and tokens are encrypted before storage using the appropriate client-side or server-side mechanism.