You change your password in WordPress from Users > Profile in the admin area. Type a new password, confirm it, and click Update Profile. Your site stays online the whole time.
Why you should change your password
A strong password is the first lock on your website. Most break-ins start with a weak or reused password.
Change it when you want a stronger one, when a staff member leaves, or when you shared it by email. Changing it takes less than a minute.
Your pages, posts and photos stay exactly as they are. Only the login changes.
Change your password step by step
You need to be logged in to the WordPress admin area. Then follow these steps.
Open the admin area
Log in to your WordPress dashboard. The menu runs down the left-hand side of the screen.
Open your profile
Move your pointer over Users. A small menu opens. Click Your Profile.
Scroll to Account Management
Scroll down the profile page. Find the box for your new password and click Set New Password.
Type the new password
WordPress fills in a strong password for you. You can keep it or type your own. Copy it somewhere safe first.
Check the strength meter
A bar under the box shows how strong the password is. Aim for Strong. Use a long mix of letters, numbers and symbols.
Click Update Profile
Scroll to the bottom and click Update Profile. WordPress saves it. Use the new password the next time you log in.
How to pick a strong password
Length matters more than tricks. A phrase of four or five random words is hard to guess and easy to remember.
Add a number and a symbol if you like. Do not use your name, your business name, or the word password.
Use a different password for every site. If one site leaks, your other sites stay safe.
A password manager can store them all for you. You then only remember one.
What if you forgot your password?
You can reset it from the login screen. Click the Lost your password? link under the login box.
Type your username or email address. WordPress sends a reset link to the email on your profile.
If the email never arrives, check your spam folder. A common mistake is a profile with an old email address. We can fix that for you.
Still locked out? Call us and we will get you back in.
A few common mistakes
Do not save the password in a note on your desktop where others can read it. Do not send it by plain email.
Do not reuse an old password with a small change, like adding a 1 at the end. Attackers try those first.
If you manage a site with more than one user, each person should have their own login. That way you can remove one person without changing everyone's password.
Questions about your WordPress site? Websnoogie in Omaha is glad to help. Call us at 402-813-4034 any day from 7 am to 10 pm.
Common questions
Will changing my password take my site offline?
No. Your site stays online. Only the login for the admin area changes.
How long should a WordPress password be?
Aim for at least 12 characters. A longer phrase is stronger and easier to remember.
AboutRod and Tami Atwood
Rod and Tami Atwood and other Websnoogie contributors write the Websnoogie blog. Rod has built websites since 2004 and founded Websnoogie, LLC in Omaha in 2012. Tami is co-owner, content editor and billing expert. Call us at 402-813-4034 or write to staff@websnoogie.com.
