I recently helped a web designer move a WordPress site from a staging server to a production host, and it struck me how many credentials were needed. What is a credential? A digital credential usually consists of a username and password, but sometimes can also include a hostname or port number, depending on the type of asset you are trying to access.
Most passwords can be retrieved from your host or easily reset if you have control of the email address associated with the account. But when disaster strikes, and you are scrambling to solve a problem, it is far better to have all your passwords handy. I am a huge proponent of password vaults (I use LastPass), but any secure method that works for you is better than using the same password everywhere!
If your site was designed or is managed by someone, I strongly recommend getting ALL of these credentials from her/him. Keep in mind that whoever controls the email address associated with the account, controls that account. I’ve made it easy for you to ask for your credentials from your website person: just send them this printable WordPress Credentials PDF.It takes more than admin password to control #WordPress website. Do you know all your credentials?Click To Tweet
Here’s the big list of every password you should have on file for your WordPress site.
- WordPress Administrator email address, username, password, and login URL (this frequently, but not always, looks something like this: https://www.example.com/wp-admin/)
- FTP or SFTP username, password, hostname, and (for SFTP) port number.
- Hosting panel, such as cPanel (most hosts have some sort of hosting manager) username, password, URL
- MySQL database credentials (these are stored in the wp-config.php file and can be retrieved via FTP if you have a working site): database hostname (maybe “localhost”), database name, database username, database password
- Registrar where you purchased your domain name: email address, username, password, URL
- Optional Third Party DNS manager (this maybe your host or your registrar, but not always): email address, username, password, URL
- Optional Third Party CDN (such as MaxCDN or CloudFront): email address, username, password, URL