Changing a user's role without losing content ownership Changing a WordPress user's role adjusts their capabilities while keeping the account and its content attribution. Review the new permissions and any…

Changing the public display name of a WordPress user Your public display name controls the author label shown by many WordPress themes and comments. It can be changed from your profile without changing the…

Changing your WordPress account password Change your WordPress password from your profile when you can sign in. If you cannot sign in, use the login screen's password reset workflow for the…

Closing comments on selected posts Close comments on a post when it should no longer accept new discussion while preserving its existing content. This is different from deleting existing…

Configuring comment moderation and disallowed words Discussion rules can hold suspicious comments for review or classify them according to the site's configured policy. Use precise rules and review false…

Creating a WordPress user with the right role Create a separate WordPress user for each person and assign the least role needed for their work. This makes access easier to review and revoke without…

Creating and revoking WordPress application passwords An application password lets an approved integration authenticate to WordPress without storing your normal interactive login password. Create a separate…

Distinguishing spam comments from genuine customer feedback Review a comment's relevance, intent and links before classifying it as spam. Genuine criticism, a short question or imperfect language should not be…

Ending other WordPress login sessions End other WordPress browser sessions when you have finished using a shared device or suspect an old login should no longer remain active. Session…

Exporting personal data through WordPress privacy tools WordPress's personal-data export tool can gather information associated with a verified person from core and participating plugins. It is different from…

Inviting contributors without sharing administrator credentials Give a contributor their own account and a clear submission workflow instead of sharing an administrator login. This preserves accountability and keeps…

Moderating comments before publication Comment moderation lets an authorised editor review submissions before they appear publicly. Configure the site's discussion policy, then maintain the…

Preventing comment form abuse without blocking all visitors Reduce comment abuse with targeted moderation and supported anti-spam controls, then test that ordinary visitors can still participate. Broad…

Processing a WordPress personal-data erasure request WordPress's erasure tool can remove or anonymise eligible personal data from core and participating plugins after a verified request. Review the scope…

Removing a WordPress user and reassigning their content When a person no longer needs WordPress access, remove or restrict the account while preserving content that belongs to the website. Review the deletion…

Reviewing WordPress administrator accounts Review administrator access regularly so every powerful account has a known owner and a current reason to exist. An unfamiliar administrator deserves…

Securing a WordPress website with practical maintenance and access controls A secure WordPress website needs maintained software, controlled access, reliable recovery and regular checks. Apply these controls to the specific…

Using two-factor authentication with a recovery plan Two-factor authentication adds a second verification step to WordPress login. Set up a recovery method at the same time so losing a phone does not leave…