Users & WordPress Security

Practical setup, management and troubleshooting guides for Users & WordPress Security.

Articles

Changing a user's role without losing content ownership

Changing a WordPress user's role adjusts their capabilities while keeping the account and its...

Changing the public display name of a WordPress user

Your public display name controls the author label shown by many WordPress themes and comments....

Changing your WordPress account password

Change your WordPress password from your profile when you can sign in. If you cannot sign in,...

Closing comments on selected posts

Close comments on a post when it should no longer accept new discussion while preserving its...

Configuring comment moderation and disallowed words

Discussion rules can hold suspicious comments for review or classify them according to the...

Creating a WordPress user with the right role

Create a separate WordPress user for each person and assign the least role needed for their...

Creating and revoking WordPress application passwords

An application password lets an approved integration authenticate to WordPress without storing...

Distinguishing spam comments from genuine customer feedback

Review a comment's relevance, intent and links before classifying it as spam. Genuine...

Ending other WordPress login sessions

End other WordPress browser sessions when you have finished using a shared device or suspect an...

Exporting personal data through WordPress privacy tools

WordPress's personal-data export tool can gather information associated with a verified person...

Inviting contributors without sharing administrator credentials

Give a contributor their own account and a clear submission workflow instead of sharing an...

Moderating comments before publication

Comment moderation lets an authorised editor review submissions before they appear publicly....

Preventing comment form abuse without blocking all visitors

Reduce comment abuse with targeted moderation and supported anti-spam controls, then test that...

Processing a WordPress personal-data erasure request

WordPress's erasure tool can remove or anonymise eligible personal data from core and...

Removing a WordPress user and reassigning their content

When a person no longer needs WordPress access, remove or restrict the account while preserving...

Reviewing WordPress administrator accounts

Review administrator access regularly so every powerful account has a known owner and a current...

Securing a WordPress website with practical maintenance and access controls

A secure WordPress website needs maintained software, controlled access, reliable recovery and...

Using two-factor authentication with a recovery plan

Two-factor authentication adds a second verification step to WordPress login. Set up a recovery...