I cannot login to my WordPress site using the Android mobile app. I have the All In One WordPress Security (AIOWPS) plugin installed and enabled the Completely Block Access to XMLRPC checkbox.
I have to note that when I blocked access to XMLRPC my failed logins went from more than 3,000 for one month to zero which means the login bots were trying to guess a username/password combination to gain access to the site.
I prefer to keep blocking XMLRPC access but I also want to use the mobile app.
I found two ways around this situation.
If I want to use the WordPress mobile app, I really have to uncheck the Completely Block Access to XMLRPC checkbox keeping the Disable Pingback Functionality From XMLRPC checked.
If I want to keep my sense of security, I have to block access to XMLRPC and just use a browser instead of the WordPress app in my mobile thingy.