Is it safe to tell Theme support staff the wordpress name and password?

  • Unknown's avatar
    ibestme · Member ·

    Hi,

    Now i’m encountering an issue with my theme(Paid theme) on wordpress, so i contacted the theme support center, ask them how to fix the issue. But after our talk, the support staff still can not find the answer to fix my issue. So he ask me to provide wordpress administative name and password to him to have a closer check.

    My biggest concern is: is it safe to tell the Theme support staff with my administrative wordpress account name and password? If he changed the password and delete my other users inside the wordpress, how can i find it back? Is there risk of losing control of my own website in this way?

    Thanks a lot,

    Bob

  • Unknown's avatar
    chrisrudzki · Member ·

    Your suspicions are correct. Handing over your password shouldn’t be necessary at all.

    It sounds like you’re referring to a theme shop outside WordPress.com, and we don’t ask for passwords.

    If you ever need to grant someone access to your site, you can create a non-admin user for them:

    https://make.wordpress.org/support/user-manual/customizing-wordpress/managing-users-on-your-wordpress-site/adding-users-to-your-wordpress-site/

    If they really need admin access, then you should still make a separate account for them, but only do it if you trust them.

    They really do have a great deal of power with admin access, so you should be sure to make backups.

    We actually offer a security and backup solution that might work for you — https://vaultpress.com/

  • Unknown's avatar
    ibestme · Member ·

    Hi Sir,

    Thanks a lot for your reply.
    I am using the Avada theme, and use its built-in woocommerce plugin to build my product page.

    But currently i’m encountering a problem with the product page.
    And woocommerce support told me it’s an issue about the Avada theme, So i contacted Avada support.

    The Avada support finally asked me for admin user name and password to have closer check at my site. They told me non-admin user is not ok for them.

    If i make a separate admin user for them, they can still access to my “Users” page after they log in
    and edit and delete my other users including my original admin account.
    So there is still risk?

    How can i get my account name and password back if somehow i lost them?

    Thanks, a will take a look at your link about the backup solution.

    Thanks,

    Bob

  • Unknown's avatar
    ibestme · Member ·

    Please understand that it’s not because i do not trust Avada. It’s just because i do not want to reveal my admin user name and password to anyone else.
    I think this should be kept private.

    So please let me know how to avoid my concern and the potential risks if finally i have to reveal my admin user name and password?

    Thanks a lot!

  • Unknown's avatar
    chrisrudzki · Member ·

    If i make a separate admin user for them, they can still access to my “Users” page after they log in
    and edit and delete my other users including my original admin account.
    So there is still risk?

    There is a risk, since any admin effectively has full control over the site. As much as you do in WordPress.

    That being said, it’s preferable to at least create for them another admin account. You shouldn’t share your own credentials. And once they’re done, you should delete their account on your site.

    I can’t really give specific advice here, as it’s really your call. I can understand, though, that if they’re going to give you hands-on help with the theme, they would probably need admin access.

  • Unknown's avatar
    ibestme · Member ·

    Hi Sir,

    Ok, thanks, i will decide.
    Can you please tell me how can i find back my admin name and password if i lost both of them?

    I am owner of website. So even if i lost the admin name and password. I can still find them back and gain control over my wordpress panel again. Am i right?

    Can you please tell me how to solve it if my concern(losing admin name and password both) really happen? Do you know the solution?(no need to be specific procedure, just want to know there is way to solve)

    Thanks a lot!

  • Unknown's avatar
    ibestme · Member ·

    Because if there is way to find back my admin name and password. Then my concern can be ignored, right?

  • Unknown's avatar
    timethief · Member ·

    The Avada theme does not exist here at wordpress.COM. Woocommerce cannot be run on any wordpress.COm hosted site. It can only be run on wordpress.ORG software installs.

    You are posting to the wrong support forum.

    We provide support only for wordpress.COM hosted sites. Our support docs do not apply to
    (1) local installs of wordpress.ORG software on your own server or
    (2) wordpress.ORG software installs on paid hosting, and we do not provide support for them at wordpress.COM.

    Also, note that we do not provide Jetpack support https://jetpack.me/support/ for sites linked to wordpress.COM accounts with the Jetpack plugin so they display on the My Sites wordpress.com account page.

    Some Jetpack solutions are here http://jetpack.me/support/

    Others are in the Jetpack support forum at WordPress.org
    http://wordpress.org/support/plugin/jetpack

    However, if help cannot be found at either one then they can file a Jetpack support ticket here > http://en.support.wordpress.com/contact/?jetpack=needs-service

    WordPress.COM and WordPress.ORG are completely separate and have different username accounts, logins, features, run different versions of some themes with the same names, and have separate support documentation and separate support forums. Read the differences here http://en.support.wordpress.com/com-vs-org/

    As you are referring to a site that is not hosted here, if you don’t have a username account at WordPress.ORG account, then click http://wordpress.org/support/ and register one on the top right-hand corner of the page that opens, https://wordpress.org/support/register.php so you can post to the support forums there.
    Resetting your WordPress.ORG password http://codex.wordpress.org/Resetting_Your_Password
    WordPress.org support docs are at https://codex.wordpress.org/Main_Page
    See also https://apps.wordpress.org/support/

  • Unknown's avatar
    ibestme · Member ·

    Hi,

    Thanks a lot for messing thing up.
    I will post question to wordpress.org

    Thanks for your help.

  • kokkieh · Staff ·

    @ibestme

    I am owner of website. So even if i lost the admin name and password. I can still find them back and gain control over my wordpress panel again. Am i right?

    The instructions to do this is in @timethief’s reply, but in case you missed it, you need this page:
    http://codex.wordpress.org/Resetting_Your_Password

    So, it is possible to reset the password, should you somehow get logged out of your self-hosted site’s dashboard. If you have FTP access you can still reset the password via the PHP admin panel or your host’s own cPanel or equivalent dashboard.

    But the .org forums, or your hosting provider’s support people, are the best place to ask for advice on exactly how to do that.

  • The topic ‘Is it safe to tell Theme support staff the wordpress name and password?’ is closed to new replies.