How to to change forgotten, locked out or hacked WordPress site password
Most of us may come to a point where we've forgotten our WordPress password, it's easily done.
Although forgotten passwords are common, other issues may happen including becoming locked out after too many login attempts.
Worst case scenario, you been hacked and you can't get back into your website!
Hacked websites can easily happen if your website is outdated or using a weak password.
This simple guide will show you how to change your WordPress password, whether you have lost it, logged in too many times or been hacked.
WordPress is a content management system released back in May 2003.
WordPress is used by 43% of all websites around the globe!
To put that in perspective, that's all of the other content management systems combined.
Great for creating blogs, business websites or even directory websites,
WordPress is very versatile, making it one of the most popular content management systems for creating your own website.
We've all signed up with a website wondering what password you should use.
With any password it's always best to keep it safe and secure.
Think of a password that you'll remember, including numbers, symbols and letters to make it stronger.
Use a combination of letters, numbers and symbols, making it harder to guess.
Passwords can be easily found by phishing attacks on websites if your password is weak.
Don't use common passwords such as
These passwords are very easy to guess, gaining access to any website within a matter on seconds.
With any strong password you can create further restrictions so they can't guess your password.
These include two factor authentication or a WordPress plugin for extra security.
Should they try a phishing attack or enter your password wrong multiple times, they'll be automatically blocked.
WordPress plugins like Loginizer will limit the attempts for guessing your password.
This will also apply for yourself when logging in, so make sure you guess it correctly.
Should you also lock yourself out don't worry, you can remove Loginizer in the plugins folder of your WordPress installation.
After an incorrect password is entered 5 times they will be temporary banned from trying to login.
You can change password attempts limit within the settings and how long you want them to be banned.
Loginizer can be downloaded, activated and installed in the plugins section of your WordPress dashboard.
Loginizers default is 5, unless you want to manually change this setting.
Alternatively if you fancy downloading it yourself, you can go to the WordPress plugins page.
WordFence is another plugin that can help lock down your site.
WordFence has extra features and it's own firewall protection that prevents any hacking attempt on the site.
It also has free and premium options, although most only need the free version.
WordFence can also be downloaded in the plugins section of the WordPress dashboard or via the WordPress website.
You'll be asked to download a backup copy of your .htaccess file before WordFence edits the file.
Once completed WordFence will of updated your file, adding extra protection.
Also check out the settings, making any changes as required.
Before you decide to change your password we recommend you using a stronger one.
Never share passwords with team members or even contract developers.
Instead create a new user role so you can manage permissions.
you can add new accounts under "Users".
The easiest way to reset you password is by using the forgotten password link.
This will send an email with a password reset link - it's all in the name.
To reset your password, go to where you login, or type in a browser yourdomain.com/wp-admin.
Replace yourdomain.com with your own domain and press enter.
You should now see your login page, at the bottom you will be able to see "Lost your password?"
Click the link, which will take you to a different page.
Type in your username if you know it, or your email address.
After you've entered your email or username press the "Get new password" button.
If successful, you'll get an email if it matches the administrator email.
If it's not worked, skip to "Changing WordPress password in Softaculous", only if you've installed with the SoftacuChanging WordPress password in Softaculouslous app.
Otherwise go to "How to change WordPress password in PhpMyAdmin".
If you're able to login to your WordPress website, the easiest way of changing your password is from the WordPress dashboard.
For this step you'll need to login via the WordPress login area.
Ok, lets login to your account if you are able to do so.
yourdomain.com/wp-admin - replace yourdomain.com with your own domainYour password has now been updated.
Changing password in your Softaculous is simple, you'll also need your hosting account details.
You've now updated your password in Softaculous.
Knowing how to change your password in PhpMyAdmin is important just in case your WordPress installation is hacked.
If you are not able to reset using the other guides above then this way should do the trick.
WordPress uses a database which can be accessed through your phpMyAdmin.
Follow the following steps to reset your WordPress password in PhpMyAdmin.
Your new password will now be updated, test your login to confirm it works.
We all go through phases of losing our password, but knowing how to fix the issue can either be frustrating or easy if you use our guide.
Remember to always use a strong password, so even if you've forget it, nobody else can access your website.
This way you'll be able to reset and carry on without the worry of it being hacked.
Use letters, numbers and symbols for a strong password that nobody else can guess.
Hackers are always trying to find a way into your website, we just can't see it.
keep passwords, plugins, themes and anything else secure and upto date.
Add an SSL certificate to prevent phishing attacks, preventing them stealing your personal information.
This way it gives any potential hackers very little chance of gaining access to your website.
Finally, find a hosting provider that reliable and concious about the servers security.
If the hosting providers server it's fully secure, all the websites on it are potentially at risk.
We hope this blog has helped you get back into your WordPress site, making it more secure for future attacks.
Are you looking for a reliable and secure WordPress web hosting provider? Check out our packages for more information.