FAQ SOP: I used 'admin' as my username — how do I fix it safely?

FAQ SOP: I used 'admin' as my username — how do I fix it safely?

You cannot rename a username in the dashboard. Do it by migration.

— Step 1: Create a new Administrator with a non-obvious username and a strong password.
— Step 2: Log out, log back in as the new admin.
— Step 3: Delete the old 'admin' user. When prompted, attribute all content to the new user — do not delete the posts.
— Step 4: Confirm the display name is not the same as the login name (display names leak in author URLs).
— Step 5: Verify: visit /?author=1 and confirm it does not expose a guessable login.

Half of brute-force traffic targets 'admin' literally. Remove the free hint.

Run this on every legacy site you inherit.