Still Using admin as Your WordPress Username? Here Is How to Change It

Is your WordPress username “admin”? Then hackers already know half of your login. Bots constantly try to log in to WordPress sites with common usernames like admin, administrator, and the site name. This is called a brute force attack. Changing your username to something unique makes these attacks much harder.

WordPress does not let you edit a username from your profile page, but there are two easy ways to change it.

Method 1: Use the Username Changer Plugin (Easiest)

1. Go to Plugins > Add New, search for Username Changer, then install and activate it.
2. Go to Users > All Users and click Edit on your admin account.
3. Next to the Username field, click Change Username.
4. Enter a new, unique username and save.
5. Log out and log back in with the new username.
6. You can deactivate and delete the plugin afterward.

The plugin is free: Username Changer.

Method 2: Create a New Admin and Delete the Old One

1. Go to Users > Add New and create a new user with the Administrator role, a unique username, and a different email address.
2. Log out, then log in as the new administrator.
3. Go to Users > All Users and delete the old admin account.
4. When WordPress asks what to do with the old user’s content, choose Attribute all content to and select your new account. This step is important, or you will lose your posts.
5. Optionally, change your new account’s email to your main address.

Make Your Login Even Safer

• Use a long, unique password, ideally from a password manager.
• Turn on two-factor authentication with a plugin like Two Factor or Wordfence.
• Limit login attempts with Limit Login Attempts Reloaded.
• Set a public Display name (Users > Profile) that is different from your username, so your username is not shown on posts.
• Keep WordPress, themes, and plugins updated.

More tips: how to protect WordPress from brute force attacks.

Frequently Asked Questions

Can I change my WordPress username?

Not from the profile page, but you can with the free Username Changer plugin, or by creating a new admin account and deleting the old one.

Is using admin as a username dangerous?

Yes. It is the first username bots try. A unique username plus a strong password and two-factor authentication makes your site much safer.

Will I lose my posts if I delete the old admin user?

Not if you choose to attribute all content to your new user when deleting. Always choose that option.

Should my display name be different from my username?

Yes. Set a display name in your profile so your real username is not shown publicly.