Password change notification

  • Unknown's avatar

    I am getting almost daily e-mails notifying me that someone is trying to change my password to my wordpress site. Is there some action that I should take?

  • Hi there,

    I don’t see any password reset attempts on your WordPress.com accounts, and before today it doesn’t look like anyone has even logged into this account for about ten months.

    So I’m going to assume this is for a site using the open source WordPress software, rather than WordPress.com. We have no control over those WordPress sites, so we’re not able to help you.

    That said, unless someone also gains access to the email address you’re using for your site’s admin account, they shouldn’t be able to reset your password, so make sure the password for your email account is secure, and consider enabling two-factor authentication on both your email and your site’s admin account – you’ll need a 2FA plugin to add that to your site.

    You can find some more information on how to protect your self-hosted WordPress site against hacking here:

    https://codex.wordpress.org/Hardening_WordPress

    And you can ask in the self-hosted WordPress forums for more advice here:

    https://wordpress.org/support/

  • Unknown's avatar

    Correction, the e-mail indicates new user registration to my WordPress site.

  • Unknown's avatar

    Here’s a sample e-mail:

    New user registration on your site marimodan.com:

    Username: sasburchett1996

    Email: (email visible only to moderators and staff)

  • Unknown's avatar

    Kokkieh,

    Thank you for your guidance.

  • Unknown's avatar

    Hi!

    You’re using WordPress.org which is beyond the scope of this forum, as @kokkieh mentioned.

    However, try going to Dashboard > Settings > General and finding the setting which says ‘Membership’, and making sure the box that says ‘Anyone can register’ is *not* ticked?

  • The topic ‘Password change notification’ is closed to new replies.