A staff account that may be compromised, moved to a new email and reset
When a colleague's mailbox may have been taken over, move their site account to a new email, send a password reset and look at recent login attacks.
- Difficulty
- Intermediate
- Time
- about 15 min
[Colleague]'s email account was taken over, and it's the one they use for our site. Find their account and its role. Change its email to [new address] once I approve with my password, then send them a password reset email once I approve. Summarise failed logins and lockouts over the last [7] days. Tell me what else they should do.
Already connected?
If SAR is already in your AI app, this is enough:
Move [colleague]'s account to [new email] and send a password reset, once I approve.
What happens
- The AI app finds the account and its role; emails are shortened and passwords are never available.
- Changing the email is approved in SAR with your password and can be undone. WordPress tells the old address, as it always does.
- The password reset email goes to the new address once you approve with your password. The current password keeps working until your colleague chooses a new one, so ask them to do it at once.
- It summarises recent login attacks as totals, without usernames or full addresses.
Approvals involved
Worked out from the tools this recipe uses.
wordpress_list_usersList usersNonewordpress_change_user_emailChange a user's emailApproval and passwordwordpress_send_password_resetSend a password resetApproval and passwordwordpress_login_activity_summaryLogin attacksNone
What you get
The account no longer tied to a mailbox someone else controls, and a new password on the way. Your colleague should also secure their email account itself.
Related recipes
- Security & backups · about 15 minAdministrators you don't recognise, found and taken down a levelList everyone who can manage your whole site, spot accounts you don't know, lower their role with your password, and send password resets where needed.
- Security & backups · about 20 minReview your site's security with WordfenceGet Wordfence's firewall, scan results and login attacks explained in plain words, with what to fix first, and block an address that keeps attacking.
- Security & backups · about 10 minCheck your WordPress files for tamperingCompare WordPress's own files and your WordPress.org plugins with the official copies, and find out whether anything was changed or is missing.
Try it on your own site
Install the plugin, add SAR to your AI app and paste the prompt. Free to start.