Change your WordPress password from your profile when you can sign in. If you cannot sign in, use the login screen's password reset workflow for the email address associated with that WordPress user.
IN THIS ARTICLE
01 Prepare secure access
Use a unique password that you do not reuse for our client area, email or other websites. A password manager can generate and store a long random password securely. Confirm that your profile email address is current, because password recovery depends on access to that mailbox.
02 Change the password while signed in
- Open Users > Profile, or the Profile menu available to your role.
- Find the Account Management section and use Set New Password or the equivalent password control.
- Keep the generated strong password or enter another strong unique value. Save it in your password manager before completing the change.
- Select Update Profile. Confirm the successful update and test the new password through a separate private browser session.
Does changing my password revoke every other access method?
If you changed the password because a device or account may be compromised, review other sessions and use the available log-out-other-sessions action. Check administrator accounts and any application passwords or integration credentials separately; these should not be assumed to disappear merely because the normal login password changed.
Enable suitable two-factor authentication where available and store recovery codes securely. Each person should have their own WordPress user account instead of sharing a single administrator password.
03 If you are locked out
Choose the lost-password option on the WordPress login screen, submit the correct username or email and check the associated mailbox, including spam. A reset link is sensitive and may expire, so request a fresh one if necessary rather than forwarding it publicly.
If reset mail never arrives, tell us the affected domain and user identifier without including passwords or reset links. Changing your client area password does not automatically change a WordPress user's password.