iThemes Security Pro 8.5.3

New Feature: Added the ability to create Application Passwords that are valid for the REST API, XML-RPC requests, or both.
New Feature: When a user has an Application Password that is valid for use by the REST API, authenticated REST API requests can be made using HTTP Basic Authentication which allows for including the username and and password with the request.
New Feature: Application Passwords that are valid for the REST API can be set to read-only. This allows for creation of services that can have full access to site data without giving permission to modify site data.
Enhancement: Improved efficiency of code, reducing memory and processor usage.
Enhancement: Improved plugin performance by reducing the number of queries made on each page.
Enhancement: Reduced memory and CPU usage due to various code improvements.
Bug Fix: Removed warning that could occur when a plugin provides fake user variables.
Bug Fix: A database backup will no longer be created when first activating the plugin.
Bug Fix: Added compatibility for MySQL strict mode in database creation syntax.
Bug Fix: Removed warning about a "non well formed numeric value encountered" in PHP 7.1.
Bug Fix: Modifications to wp-config.php, .htaccess, and nginx.conf files are now properly re-added upon reactivation.
Bug Fix: Fixed full settings for Hide Backend being displayed after disabling the feature and saving the settings.
Bug Fix: Enabling or disabling the Hide Backend feature will update the "Log Out" link so that it works as expected without having to load a new page.
Bug Fix: Enabling or disabling the Hide Backend feature now properly updates the .htaccess/nginx.conf file on enable and disable rather than at some future point.
Bug Fix: Fixed issue that could cause improper database table creation on multisite sites.

Bug Fix: Fixed bug that prevented Away Mode from activating on some sites.

Bug Fix: Removed warning that could occur when upgrading from pre-3.6.0 versions of iThemes Security Pro.
Bug Fix: Fixed scenario that could cause users to have to provide two-factor authentication during login when the Two-Factor Authentication feature is disabled.
Bug Fix: Fixed link sent to users when using User Security Check to send an email reminder to a user prompting them to configure two-factor.
Bug Fix: Fixed bug that could prevent generation of new two-factor codes on the profile page.