Change a WordPress user's password, email and public display name

Every WordPress user has a profile with a password, email address and a public name. By default WordPress shows your username as the author of posts, which also tells attackers half of your login. Changing the display name and keeping passwords strong are two quick security wins.

Before you start

• Access to the WordPress dashboard. Lost your password completely? See reset the WordPress admin password.

Change your own password

1. Go to Users → Profile (or click your name at the top right and choose Edit Profile).
2. Scroll to Account Management and click Set New Password.
3. WordPress suggests a strong password. Keep it, or type your own until the meter shows Strong.
4. Click Update Profile.

To sign out every other device (for example after a suspected leak), click Log Out Everywhere Else in the same section.

Change another user's password (administrators)

1. Go to Users → All Users and click the user's name.
2. Under Account Management, click Set New Password and enter a new one, or click Send Reset Link to let the user choose it.
3. Click Update User.

Change the account email

In Users → Profile, change Email (required) and click Update Profile. WordPress sends a confirmation link to the new address; the change applies only after you click it. The site's admin email in Settings → General is separate and is confirmed the same way.

Change the public display name

1. Go to Users → Profile.
2. Fill in First Name, Last Name and/or Nickname (required).
3. Choose one in Display name publicly as.
4. Click Update Profile.

Troubleshooting

• The confirmation email never arrives: WordPress mail may be blocked or marked as spam; set up SMTP for WordPress.
• Logged out right after changing the password: normal; log in again with the new password.

Next steps

• Harden WordPress security
• Protect the login page
• Log in to the dashboard