WordPress Danger: Admin is NOT your Admin Log in Is It?

So you’ve bitten the bullet and gone with WordPress for your website system, good for you! I swear by this method and have consistently used it for many years. While I acknowledge that other methods may work, I am most comfortable with this one. To enhance the security of your system, it’s imperative to change the Administrator account. Why? Simply put, I have observed multiple attempts to log into my system using Wordfence.

---

Hanoi, Vietnam, attempted a login with an invalid username, “admin.”

---

---

---

---

I want to clarify that I haven’t attempted to log in from any of these countries. However, I have noticed that all of the login attempts made use the username ‘Admin‘. This is a common tactic many hackers use as it is one of the most vulnerable attack vectors.

How to Remove Admin from WordPress?

• Go to the Users Menu on your WordPress site
• Create a NEW userid, and call it what you wish (e.g. ThisIsNotAdmin ) that has Admin privileges, and give this user id a good password (not that crappy one you use for most sites)
• Log out of your Admin account, and try to log in with your new Admin UserID. Make sure you can do all you want and that it is an Admin account (be sure before you do the next step).
• From your new Admin userID, delete the Admin user ID (maybe after you have done a complete backup of your site, just to be paranoid).

That is it. You have shut down the first attack vector for hackers, so your site is a little more secure (but don’t get cocky; there are many other ways into your site, this is just shutting off one of the easiest to attack).