A staff account that may be compromised, moved to a new email and reset
When a colleague's mailbox may have been taken over, move their site account to a new email, send a password reset and look at recent login attacks.
- Difficulty
- Intermediate
- Time
- about 15 min
[Colleague]'s email account was taken over, and it's the one they use for our site. Find their account and its role. Change its email to [new address] once I approve, then send them a password reset email once I approve. Summarise failed logins and lockouts over the last [7] days. Tell me what else they should do.
Already connected?
If Mitos is already in your AI assistant, this is enough:
Move [colleague]'s account to [new email] and send a password reset, once I approve.
What happens
- The AI assistant finds the account and its role; emails are shortened and passwords are never available.
- Changing the email is approved with a 6-digit code as an extra check that it's really you, and can be undone. WordPress tells the old address, as it always does.
- The password reset email goes to the new address once you approve with a 6-digit code as an extra check that it's really you. The current password keeps working until your colleague chooses a new one, so ask them to do it at once.
- It summarises recent login attacks as totals, without usernames or full addresses.
Approvals involved
Worked out from the tools this recipe uses.
wordpress_list_usersList usersNonewordpress_change_user_emailChange a user's emailApproval with a 6-digit codewordpress_send_password_resetSend a password resetApproval with a 6-digit codewordpress_login_activity_summaryLogin attacksNone
What you get
The account no longer tied to a mailbox someone else controls, and a new password on the way. Your colleague should also secure their email account itself.
Related recipes
- Security & backups · about 15 minAdministrators you don't recognise, found and taken down a levelList everyone who can manage your whole site, spot accounts you don't know, lower their role with a 6-digit code, and send password resets where needed.
- Security & backups · about 20 minReview your site's security with WordfenceGet Wordfence's firewall, scan results and login attacks explained in plain words, with what to fix first, and block an address that keeps attacking.
- Security & backups · about 10 minCheck your WordPress files for tamperingCompare WordPress's own files and your WordPress.org plugins with the official copies, and find out whether anything was changed or is missing.
Try it on your own site
Install the plugin, add Mitos to your AI assistant and paste the prompt. Free to start.