{"id":2601,"date":"2021-10-28T15:05:33","date_gmt":"2021-10-28T15:05:33","guid":{"rendered":"https:\/\/ccbill.com\/kb\/?p=2601"},"modified":"2023-03-06T12:19:15","modified_gmt":"2023-03-06T12:19:15","slug":"change-wordpress-password","status":"publish","type":"post","link":"https:\/\/ccbill.com\/kb\/change-wordpress-password","title":{"rendered":"How to Change\/Reset the WordPress Password"},"content":{"rendered":"\n

Introduction<\/p>\n\n\n\n

Strong passwords protect the WordPress Admin against unauthorized access and common security threats<\/a>, such as brute-force attacks<\/a>. However, long and complex passwords are not easy to memorize.<\/p>\n\n\n\n

Users occasionally forget passwords or compromise website security by storing unencrypted credentials locally or in browsers.<\/p>\n\n\n\n

Change the WordPress password immediately if you cannot access the WP Admin or suspect that the credentials have been compromised.<\/p>\n\n\n\n

Find out how to change the WordPress password using 8 different methods.<\/strong><\/p>\n\n\n\n

\"Changing<\/figure>\n\n\n\n

Change WordPress Password<\/h2>\n\n\n\n

There are several ways to change the WordPress admin password. Deciding which method to use depends on the user's permissions, access, and technical expertise.<\/p>\n\n\n\n

The methods are listed from the simplest to the more complex solutions.<\/p>\n\n\n\n

Websites that collect sensitive customer information, like ecommerce stores, need to use security plugins<\/a> and set up two-factor authentication in WordPress<\/a>.<\/p>\n\n\n\n

Method 1: Via \"Lost Password\" Feature<\/h3>\n\n\n\n

Administrators that forget their WordPress password can use the \"Lost your password\" feature to regain access. To use this method, you also need access to the email account associated with the user.<\/p>\n\n\n\n

To reset the WordPress password: <\/p>\n\n\n\n

1. Select Lost your password? <\/strong>on the WordPress login page.<\/p>\n\n\n\n

\"The<\/figure>\n\n\n\n

2. Enter the Username<\/em> or registered Email Address<\/em> and click Get New Password<\/strong>.<\/p>\n\n\n

\n
\"Enter<\/figure><\/div>\n\n\n

3. The system delivers an automated email with a link to reset the WordPress password.<\/p>\n\n\n

\n
\"WordPress<\/figure><\/div>\n\n\n

4. Use the randomly generated password or enter a custom password in the New password<\/strong> field.<\/p>\n\n\n\n

5. Click Reset Password<\/strong> to change the password.<\/p>\n\n\n

\n
\"Enter<\/figure><\/div>\n\n\n

Confirm that the new password works by logging in to the WordPress Admin.<\/p>\n\n\n\n

Method 2: Via WordPress Dashboard<\/h3>\n\n\n\n

The WordPress Dashboard allows admins to change existing user passwords.<\/p>\n\n\n\n

To change a password in the WordPress Dashboard:<\/p>\n\n\n\n

1. Access the WordPress Admin.<\/p>\n\n\n\n

2. Select Users<\/strong>.<\/p>\n\n\n\n

3. Go to All Users<\/strong>. <\/p>\n\n\n\n

4. Click Edit <\/strong>to access the User Profile<\/em> page.<\/p>\n\n\n

\n
\"Edit<\/figure><\/div>\n\n\n

5. Select Set New Password<\/strong> in the Account Management<\/em> section.<\/p>\n\n\n\n

6. Use the auto-generated password or enter a custom password in the provided field. Consult the password strength meter to create a strong WordPress password<\/a>. <\/p>\n\n\n\n

7. Click Update Profile<\/strong> to change the password.<\/p>\n\n\n

\n
\"Change<\/figure><\/div>\n\n\n

Log out and try to log in using the newly created password.<\/p>\n\n\n\n

Method 3: Via cPanel<\/h3>\n\n\n\n

To avoid installing WordPress manually<\/a>, website owners often use script libraries, like Softaculous or Fantastico, to streamline the installation process. Administrators with access to cPanel can edit the existing installation details, including the WordPress admin password:<\/p>\n\n\n\n

1. Access cPanel.<\/p>\n\n\n\n

2. Select WordPress Manager<\/strong>. The name and location of the installation software solution in cPanel may vary depending on the hosting provider and script library.<\/p>\n\n\n\n

\"WordPress<\/figure>\n\n\n\n

3. Locate the Admin Account<\/strong> section. This section contains the admin user credentials.<\/p>\n\n\n\n

4. Enter the new password in the Admin Password<\/strong> field.<\/p>\n\n\n

\n
\"Change<\/figure><\/div>\n\n\n

5. Click Save Installation Details<\/strong> at the bottom of the page.<\/p>\n\n\n

\n
\"Save<\/figure><\/div>\n\n\n

Use the new password to access the WordPress admin panel.<\/p>\n\n\n\n

Method 4: Via phpMyAdmin<\/h3>\n\n\n\n

WordPress user credentials are stored in the WordPress database. To access the user database entry and edit the password value via phpMyAdmin:<\/p>\n\n\n\n

1. Access phpMyAdmin.<\/p>\n\n\n\n

2. Click Databases<\/strong>. <\/p>\n\n\n\n

3. Select your WordPress database.<\/p>\n\n\n\n

\"Access<\/figure>\n\n\n\n

4. Click wp_users<\/strong> in the Table<\/em> column to access user credentials.<\/p>\n\n\n

\n
\"The<\/figure><\/div>\n\n\n

5. The user_login <\/em>and user_pass <\/em>columns contain user credentials. Click Edit <\/strong>to change the user password value.<\/p>\n\n\n

\n
\"Edit<\/figure><\/div>\n\n\n

6. Enter a new password in the user_pass<\/em> Value<\/strong> field. The field is case-sensitive. <\/p>\n\n\n\n

7. Select MD5<\/strong> in the user_pass<\/em> dropdown menu. The system is going to encrypt and store the password.<\/p>\n\n\n

\n
\"Change<\/figure><\/div>\n\n\n

8. Click Go <\/strong>at the bottom right corner of the screen.<\/p>\n\n\n

\n
\"Encrypt<\/figure><\/div>\n\n\n

Visit the WordPress login page and access the Dashboard using the new password.<\/p>\n\n\n\n

Method 5: Via FTP<\/h3>\n\n\n\n

Website owners with access to the WordPress server can change the password by editing the functions.php<\/em> file.<\/p>\n\n\n\n

To change a WordPress password via FTP:<\/p>\n\n\n\n

1. Use a preferred FTP client, like WinSCP or FileZilla to establish an SSH<\/a> connection with the WordPress server.<\/p>\n\n\n\n

2. Access the directory of the theme currently active on the website. In this example, the active theme is called Twenty Twenty-One, and the files are located in the \\wp-content\\themes\\twentytwentyone\\<\/em> directory. <\/p>\n\n\n\n

3. Download the existing functions.php<\/em> file to your local device.<\/p>\n\n\n

\n
\"The<\/figure><\/div>\n\n\n

4. Use a text editor, like Notepad++, to add the following code after the initial <?php<\/em><\/strong> tag:<\/p>\n\n\n\n

wp_set_password( 'yourpassword', 1 );<\/code><\/pre>\n\n\n\n
Replace the <em>yourpassword<\/em> <\/code>value with the new password. The 1<\/code><\/strong> value is the user ID number in the wp_users<\/em> table. If necessary, change the user ID number to reflect the ID in your wp_users<\/em> table.<\/p>\n\n\n
\n
\"Edit<\/figure><\/div>\n\n\n
5. Upload the modified functions.php<\/em> file to the server and overwrite the existing file.<\/p>\n\n\n\n
6. Access the WordPress Dashboard and change the password.<\/p>\n\n\n\n
7. Remove the code from the functions.php<\/em> file. <\/p>\n\n\n\n
If you do not remove the code from the functions.php<\/em> file, the system is going to reset the password every time a page loads.<\/p>\n\n\n\n
Method 6: Via WP-CLI<\/h3>\n\n\n\n
WP-CLI is a command-line tool for managing WordPress websites. To change the WordPress password via the WP-CLI tool: <\/p>\n\n\n\n
1. Access the WordPress installation directory:<\/p>\n\n\n\n
cd var\/www\/html\/<\/code><\/pre>\n\n\n\n
Modify the path to match the location of the WordPress directory on your system.<\/p>\n\n\n\n
2. Retrieve a list of WordPress users:<\/p>\n\n\n\n
wp user list<\/code><\/pre>\n\n\n\n
The output shows all WordPress users, including their ID numbers.<\/p>\n\n\n\n
3. Utilize the user ID number to update the user's password:<\/p>\n\n\n\n
wp user update 1 --user_pass=yourpassword<\/code><\/pre>\n\n\n\n
The user ID number in this example is 1<\/strong>.<\/p>\n\n\n\n
Method 7: Via MySQL<\/h3>\n\n\n\n
Website owners can use the MySQL client to change the WordPress admin password. This example shows how to change the WordPress password in Ubuntu: <\/p>\n\n\n\n
1. Use the cat command<\/a> to create a new text file:<\/p>\n\n\n\n
cat > wp.txt<\/code><\/pre>\n\n\n\n
2. Press Enter <\/strong>and type the new password.<\/p>\n\n\n\n
\"Create<\/figure>\n\n\n\n
Press Ctrl+D<\/strong> to exit the file.<\/p>\n\n\n\n
3. Confirm that the file was created and check its content.<\/p>\n\n\n\n
cat wp.txt<\/code><\/pre>\n\n\n\n
The output confirms that the password is correct.<\/p>\n\n\n
\n
\"New<\/figure><\/div>\n\n\n
4. Encrypt the password using MD5:<\/p>\n\n\n\n
tr -d '\\r\\n' < wp.txt | md5sum | tr -d '-'<\/code><\/pre>\n\n\n\n
The system displays the hashed password from the wp.txt<\/em> file.<\/p>\n\n\n
\n
\"Hashed<\/figure><\/div>\n\n\n
Store the hashed password locally. <\/p>\n\n\n\n
5. Delete the wp.txt<\/em> file:<\/p>\n\n\n\n
rm -rf wp.txt<\/em><\/strong><\/p>\n\n\n\n
This is a security measure. Do not store unencrypted password files.<\/p>\n\n\n\n
6. Log in to MySQL:<\/p>\n\n\n\n
mysql -u root -p<\/code><\/pre>\n\n\n\n
7. Access the WordPress database and display the database tables:<\/p>\n\n\n\n
use wordpress;\nshow tables;<\/code><\/pre>\n\n\n\n
WordPress users are stored in the wp_users <\/em><\/strong>table.<\/p>\n\n\n\n
8. Retrieve IDs, usernames, and passwords from the wp_users<\/em><\/strong> table:<\/p>\n\n\n\n
SELECT ID, user_login, user_pass FROM wp_users;<\/code><\/pre>\n\n\n\n
The system displays existing passwords encrypted using the MD5 algorithm. <\/p>\n\n\n\n
9. Change the WordPress admin password in MySQL:<\/p>\n\n\n\n
UPDATE wp_users SET user_pass=('236fbdb73fa7989c2aacdbbffe878f6b') WHERE user_login = 'admin';<\/code><\/pre>\n\n\n\n
In this example, the value 236fbdb73fa7989c2aacdbbffe878f6b<\/em><\/strong> is the encrypted password for the admin<\/strong> user. Enter the MD5 hashed password.<\/p>\n\n\n\n
10. Confirm that the new password has been applied:<\/p>\n\n\n\n
SELECT ID, user_login, user_pass FROM wp_users;<\/code><\/pre>\n\n\n\n
Use the new password to access the WordPress Dashboard.<\/p>\n\n\n\n
Method 8: Via Emergency Password Reset Script<\/h3>\n\n\n\n
Administrators that do not have access to their email nor website database can use an Emergency Password Reset Script to change the WordPress admin password.<\/p>\n\n\n\n
To change the password via a password reset script:<\/p>\n\n\n\n
1. Access the WordPress server using cPanel or a preferred FTP client. <\/p>\n\n\n\n
2. Create an emergency.php<\/em> file in the WordPress root directory.<\/p>\n\n\n\n
\"Creating<\/figure>\n\n\n\n
3. Copy and paste the Emergency Password Script<\/a> in the emergency.php<\/em> file and save the file. <\/p>\n\n\n\n
4. Open a browser and access the emergency.php<\/em> script:<\/p>\n\n\n\n
http://yourwebsite.com\/emercgency.php<\/code><\/pre>\n\n\n\n
5. The script prompts a login screen. Enter the existing admin username and a new password.<\/p>\n\n\n\n
6. Visit the WordPress login page and log in using the new credentials.<\/p>\n\n\n\n
7. Delete the emergency.php<\/em> file from the installation directory. <\/p>\n\n\n\n
While the emergency.php file is in the folder, anyone can visit the URL and reset the admin password.<\/p>\n\n\n\n
Why Change\/Reset Your WordPress Password?<\/h2>\n\n\n\n
Most serviced use passwords as the primary line of defense against unauthorized access. Users forget their credentials all the time, share passwords, or store them in weakly protected areas like emails, browsers, or local devices.<\/p>\n\n\n\n
Website owners are especially vulnerable as malicious software, account takeover fraud<\/a>, and social engineering target administrative users.<\/p>\n\n\n\n
The most common reasons for changing WordPress passwords are:<\/p>\n\n\n\n