Wordpress changing the admin-ID or hide author pages?

8 oktober 2013|Internet, Wordpress|admin id, change

In wordpress you can easily change the admin id to a name which is less hackable. But did you know this is of no use unless you have a huge user database with loads of dummy users in which you can hide your admin?

I have seen many video’s and instructions telling you to create a new admin, login and delete the old admin. Video’s that instruct you to create a admin with a name like ‘youdonotfindme’. Plugins like “Better WP Security” suggesting you to change the id and name. And they are all right to some extend. But the thing is that as long as your author pages can be called and you wrote articles with the admin username they are able to find you!! (even if the admin did not write a single article).

Did you know you can call any wordpress website like this?

if you vary the 1 into 2,3,4,5, etc it will at some moment show you all articles written by that author/user id. If you only have one user they will have the adminname as it is revealed in that simple call to your website and they only need the next step: the password.

The only way to hide it is to have loads of users with no permissions and each with its own lengthy dummy password. So when they find a name and they hack it, they still can’t do anything as the user has no rights. They will get bored by trying to hack you as each cracked password will bring them into a user area with no permissions. Unless they really hit the admin-id of course.

But with a login detection plugin like “login lockdown” you have already discovered what is going on and you are way ahead of them

Hide your author pages plugin.

But what if you dont want to create a load of users and hide your admin? What if you only have one admin with a fancy loginname and you still want to hide it? Just disable the author call to your website is the solution. There is a nice plugin you can use for that which redirects those calls to the root or any custom url of your desire. The plugin is called “Disable Author Pages” And can be downloaded at wordpress.org.

Download the plugin : disable author pages

After installing it and enabling it goto to its settings and enable the redirecting (see image below). Once done nobody can call any author pages anymore and thus revealing the admin name by accident. This will only work if you dont want people to see what author wrote what articles and call his list of written documents. I don’t mind as i never intended to have this ability in my blog anyway. I am the only author, so who cares? I don’t!

The Disable Author Pages Plugin

The best thing todo if you want to have your author pages called.

• Create loads of empty users with a dummy password and no articles attached to them and no permission.
• Create a author which you use to write all your articles
• Move your admin user so its hidden within the rest of the users and make sure it has also no articles attached. This way it will look the same as any dummy user they call.