How to protect your WordPress admin account
Simple steps that stop most break-in attempts.
- 1
Use a strong, unique password
In WordPress go to Users → Profile, click Set New Password and use a long password you don’t use anywhere else.
- 2
Don’t use “admin” as the username
If your username is admin, create a new administrator with another name, log in as the new user and delete the old one, giving its content to the new user.
- 3
Remove users you don’t need
Under Users, remove old staff or developer accounts.
- 4
Turn on two-factor authentication
Use a security plugin that offers two-factor login, so a password alone isn’t enough.
- 5
Keep everything updated
Most hacks use outdated plugins. Follow Update WordPress safely every month.
Stuck on a step? Open a ticket and tell us the step number.