Changing your WordPress account password

Change your WordPress password from your profile when you can sign in. If you cannot sign in, use the login screen's password reset workflow for the email address associated with that WordPress user.

01 Prepare secure access

Use a unique password that you do not reuse for our client area, email or other websites. A password manager can generate and store a long random password securely. Confirm that your profile email address is current, because password recovery depends on access to that mailbox.

02 Change the password while signed in

  1. Open Users > Profile, or the Profile menu available to your role.
  2. Find the Account Management section and use Set New Password or the equivalent password control.
  3. Keep the generated strong password or enter another strong unique value. Save it in your password manager before completing the change.
  4. Select Update Profile. Confirm the successful update and test the new password through a separate private browser session.

Does changing my password revoke every other access method?

If you changed the password because a device or account may be compromised, review other sessions and use the available log-out-other-sessions action. Check administrator accounts and any application passwords or integration credentials separately; these should not be assumed to disappear merely because the normal login password changed.

Enable suitable two-factor authentication where available and store recovery codes securely. Each person should have their own WordPress user account instead of sharing a single administrator password.

03 If you are locked out

Choose the lost-password option on the WordPress login screen, submit the correct username or email and check the associated mailbox, including spam. A reset link is sensitive and may expire, so request a fresh one if necessary rather than forwarding it publicly.

If reset mail never arrives, tell us the affected domain and user identifier without including passwords or reset links. Changing your client area password does not automatically change a WordPress user's password.

Sources and further reading

  • 0 Users Found This Useful
  • wordpress, security-ssl
Was this answer helpful?

Related Articles

Securing a WordPress website with practical maintenance and access controls

A secure WordPress website needs maintained software, controlled access, reliable recovery and...

Changing the public display name of a WordPress user

Your public display name controls the author label shown by many WordPress themes and comments....

Changing a user's role without losing content ownership

Changing a WordPress user's role adjusts their capabilities while keeping the account and its...

Closing comments on selected posts

Close comments on a post when it should no longer accept new discussion while preserving its...

Configuring comment moderation and disallowed words

Discussion rules can hold suspicious comments for review or classify them according to the...