How to Create Users in WordPress

WordPress allows you to create multiple user accounts so that different people can access your website with their own usernames and passwords. This is especially useful for business websites, blogs, online magazines, membership websites, and teams where more than one person needs to manage content.

Instead of sharing a single administrator account, you can create individual accounts and assign each person an appropriate role. For example, a writer can be given the Author role while a website manager can receive the Administrator role.

In this guide, you will learn how to create users in WordPress, understand the different user roles, assign permissions, edit user accounts, delete users, and follow important security practices.

---

What Is a WordPress User?

A WordPress user is an account that allows a person to log in to a WordPress website.

A user account can contain information such as:

• Username
• Email address
• First name
• Last name
• Password
• Website
• Profile picture
• Biographical information
• User role

The permissions available to a user depend largely on the role assigned to that account.

For example, an administrator can manage most aspects of a WordPress website, while a subscriber generally has much more limited access.

---

Why Create Separate WordPress Users?

Creating separate accounts is useful when multiple people work on the same website.

For example, a company website might have:

Administrator
     ↓
Website Manager

Editor
     ↓
Content Manager

Author
     ↓
Blog Writer

Contributor
     ↓
Content Contributor

Each person can use their own account instead of sharing the administrator’s credentials.

This provides several benefits:

• Better account security
• Easier user management
• More appropriate permissions
• Individual content attribution
• Easier removal of access
• Better accountability

---

WordPress User Roles

WordPress includes several built-in user roles.

1. Administrator

The Administrator has extensive control over a WordPress website.

Depending on the WordPress installation, an administrator can generally:

• Manage users
• Install and manage plugins
• Install and manage themes
• Edit website settings
• Create and edit content
• Manage comments
• Upload media
• Manage website configuration

Because administrators have extensive privileges, administrator accounts should be protected carefully.

---

2. Editor

An Editor can generally manage content created by other users.

Editors can typically:

• Create posts
• Edit posts
• Publish posts
• Delete posts
• Manage categories
• Manage tags
• Moderate comments
• Manage pages
• Upload media

An Editor does not normally have the same administrative capabilities as an Administrator.

---

3. Author

An Author can generally create and manage their own posts.

Depending on the site’s configuration, an Author can:

• Create posts
• Edit their own posts
• Publish their own posts
• Delete their own posts
• Upload media

Authors generally cannot manage other users or change major website settings.

---

4. Contributor

A Contributor can generally write and manage their own posts but does not normally have permission to publish them.

A typical workflow is:

Contributor
     ↓
Writes Article
     ↓
Submits for Review
     ↓
Editor Reviews
     ↓
Editor Publishes

This role can be useful for websites that accept content from multiple writers.

---

5. Subscriber

A Subscriber has very limited permissions.

This role is commonly used when visitors need an account to access certain website features or content.

The exact capabilities can be changed by plugins or custom configurations.

---

WordPress User Roles at a Glance

Role	Create Posts	Publish Posts	Edit Others’ Posts	Manage Users	Site Settings
Administrator	Yes	Yes	Yes	Yes	Yes
Editor	Yes	Yes	Yes	No	No
Author	Yes	Yes	No	No	No
Contributor	Yes	No	No	No	No
Subscriber	Limited	No	No	No	No

The exact capabilities can be modified by plugins or custom development, so the table represents the standard WordPress roles rather than every possible configuration.

---

How to Create a New User in WordPress

Creating a user is straightforward if you have sufficient permissions.

Step 1: Log In to WordPress

Log in to your WordPress Dashboard.

You can usually access it at:

https://yourdomain.com/wp-admin/

Enter your administrator credentials and click Log In.

---

Step 2: Open the Users Section

From the WordPress Dashboard, go to:

Users → Add New User

The exact wording can vary slightly depending on your WordPress version.

You will see a form for creating the new account.

---

Step 3: Enter the Username

Enter a unique username.

For example:

johnwriter

Choose a username that is easy for the user to identify but avoid using predictable administrative usernames where possible.

The username is used as part of the user’s login information.

Depending on your WordPress configuration, the username may not be changeable through the normal user-editing interface later.

---

Step 4: Enter the Email Address

Enter the user’s email address.

For example:

[email protected]

Use an email address that the user can access.

The email address may be used for account notifications and password recovery.

Each WordPress user generally needs a unique email address within the site.

---

Step 5: Enter the User’s Name

You may see fields such as:

• First Name
• Last Name
• Website

These fields are optional in many WordPress installations.

Adding the user’s name can make content attribution more useful.

For example:

First Name: John
Last Name: Smith

---

Step 6: Create a Password

WordPress can generate a strong password automatically.

You can also enter a different strong password if the interface allows it.

A good password should be:

• Long
• Unique
• Difficult to guess
• Not reused on another website

Avoid passwords based on easily available information such as names, birthdays, company names, or simple number sequences.

---

Step 7: Choose the User Role

The Role option determines the user’s permissions.

Select the role that matches the person’s responsibilities.

For example:

Content Writer → Author
Content Reviewer → Editor
Website Administrator → Administrator
Guest Contributor → Contributor

Do not give Administrator access simply because it is convenient. Assign the minimum role required for the user’s work.

---

Step 8: Send Account Information

Depending on your WordPress setup, you may see an option to send the new user an email about their account.

If available, enable the notification option when appropriate.

The user can then receive information about their new account.

---

Step 9: Add the User

After reviewing the information, click:

Add New User

WordPress will create the account.

The new user can then log in using the credentials or account setup information provided to them.

---

How to Create a WordPress User From the Users Page

You can also begin from the existing user list.

Go to:

Users → All Users

Then click:

Add New User

Fill in the required information and select the appropriate role.

Click:

Add New User

The account will be added to your WordPress installation.

---

How to Edit a WordPress User

You can modify an existing user’s profile if your account has sufficient permissions.

Go to:

Users → All Users

Find the user you want to modify.

Hover over the username and click:

Edit

You can then change available profile information such as:

• First name
• Last name
• Nickname
• Display name
• Email address
• Website
• Password
• Biographical information
• User role

After making changes, click:

Update User

---

How to Change a User’s Role

Changing a user’s role can change what that person is allowed to do.

Go to:

Users → All Users

Select the user.

Click:

Edit

Find the Role field.

Select the appropriate role and click:

Update User

For example, you might change:

Contributor
      ↓
Author

when a writer becomes responsible for publishing their own articles.

---

How to Change a WordPress User’s Password

An administrator can change another user’s password from the user profile.

Go to:

Users → All Users → Edit

Find the password section and generate or enter a new password.

Save the changes.

For security reasons, use a strong and unique password.

If the user needs to reset their own password, they can normally use the Lost your password? option on the WordPress login page.

---

How to Change a User’s Display Name

WordPress can display a user’s name as the author of a post.

To change it:

1. Go to Users → All Users.
2. Click Edit for the user.
3. Find the Name section.
4. Enter the desired first name, last name, or nickname.
5. Select the preferred Display name publicly as option.
6. Click Update User.

For example, a user might have:

Username:
johnwriter

Display Name:
John Smith

The public author name can therefore be different from the login username.

---

How to Add a User’s Biography

WordPress user profiles can include a biography.

Go to:

Users → Profile

or edit the relevant user profile as an administrator.

Enter a short description in the biography field.

For example:

John Smith is a technology writer who publishes
articles about WordPress, web hosting and website security.

Whether the biography is displayed publicly depends on your theme and plugins.

---

How to Delete a WordPress User

If a user no longer needs access to your website, you can remove the account.

Go to:

Users → All Users

Find the user you want to remove.

Click:

Delete

WordPress may ask what should happen to content owned by that user.

You may be given options such as:

• Delete the user’s content
• Attribute the content to another user

Choose carefully if the account has published posts or pages.

For an established website, transferring the user’s content to another account is often preferable to accidentally deleting important articles.

---

What Happens to a User’s Posts When You Delete Their Account?

If a user has published content, WordPress may ask what to do with that content.

For example:

Delete User

What should be done with content owned by this user?

○ Delete all content
○ Attribute all content to:
  [Another User]

If the content should remain on your website, select the appropriate existing user to receive attribution.

Always review the available options before confirming the deletion.

---

How to Create Users Automatically

Some WordPress plugins can allow visitors to register their own accounts.

For example, a membership website might provide:

Visitor
   ↓
Registration Form
   ↓
WordPress User Account
   ↓
Subscriber / Member

You can find the standard registration-related setting under:

Settings → General

Depending on your WordPress version, look for:

Membership → Anyone can register

Do not enable public registration unless you actually need it.

If public registration is enabled, review the default role assigned to new users and use appropriate security and spam-prevention measures.

---

How to Change the Default Role for New Users

If your website allows visitors to register, WordPress provides a setting for the default role assigned to newly registered users.

Go to:

Settings → General

Find:

New User Default Role

Choose an appropriate low-privilege role.

For many websites, a limited role such as Subscriber is more appropriate than an administrative role.

Never set the default registration role to Administrator.

---

How to Prevent Unauthorized User Registration

If your website does not need public registration, you can disable it.

Go to:

Settings → General

Find:

Membership

Disable:

Anyone can register

Save your changes.

This prevents normal public registration through WordPress’s built-in registration functionality.

Plugins can have their own registration systems, so also check membership, e-commerce, forum, or community plugins if applicable.

---

WordPress User Security Best Practices

User accounts are an important part of website security.

1. Give Users Only the Required Role

Use the principle of least privilege.

For example:

Writer → Author
Reviewer → Editor
Administrator → Administrator

Do not provide administrative privileges unless they are genuinely required.

---

2. Avoid Shared Accounts

Instead of creating one account called:

editor

and giving the same password to multiple people, create individual accounts.

For example:

john-writer
sarah-editor
mike-manager

Individual accounts make it easier to manage access and identify who created or modified content.

---

3. Use Strong Passwords

Encourage every user to use a unique password.

Password managers can help users generate and store strong passwords.

---

4. Protect Administrator Accounts

Administrator accounts have extensive privileges and should receive additional security attention.

Use:

• Strong unique passwords
• Multi-factor authentication where available
• Trusted devices
• Security monitoring
• Regular account reviews

---

5. Remove Unused Accounts

If someone no longer needs access to your website, review their account and remove or appropriately disable access.

Do not leave unnecessary accounts active indefinitely.

---

6. Review User Roles Regularly

A user who was originally given Administrator access may no longer need it.

Review user roles periodically and reduce privileges when responsibilities change.

---

Common Problems When Creating WordPress Users

User Cannot Log In

Check:

• Username or email address
• Password
• Account status
• Login URL
• Security plugins
• Login restrictions

If necessary, the user can use the password recovery option on the WordPress login page.

---

WordPress Says the Username Already Exists

Usernames must be unique.

Choose another username.

For example, if:

john

already exists, you might use:

johnsmith

or another suitable username.

---

WordPress Says the Email Address Is Already Registered

An email address can generally only be associated with one WordPress account on the same installation.

Check:

Users → All Users

to determine whether the email address is already associated with another account.

---

The User Cannot See Certain Dashboard Options

This is usually related to the user’s role or capabilities.

For example, an Author should not expect to have the same dashboard permissions as an Administrator.

Check the assigned role and any custom permissions provided by plugins.

---

The User Can Do More Than Expected

Check the user’s assigned role and any plugins that modify WordPress capabilities.

A plugin may add custom roles or permissions.

Review the account and remove unnecessary privileges.

---

WordPress Users and Content Ownership

When multiple people publish content, WordPress associates posts with user accounts.

For example:

John → WordPress Tutorials
Sarah → SEO Articles
Mike → Hosting Guides

This allows a website to maintain author information and content ownership.

Depending on your theme, visitors may see an author name, author archive, biography, or other user-related information.

---

When Should You Use an Editor Instead of an Administrator?

If someone only needs to manage website content, an Editor may be more appropriate than an Administrator.

For example:

Content Manager

Needs to:

• Write articles
• Edit articles
• Publish articles
• Manage categories
• Review other writers’ content

An Editor may be sufficient.

Website Administrator

Needs to:

• Install plugins
• Configure themes
• Manage users
• Change WordPress settings
• Perform technical maintenance

An Administrator may be necessary.

Always match the role to the actual responsibilities.

---

Frequently Asked Questions

Can I create multiple users in WordPress?

Yes. WordPress supports multiple user accounts, and you can assign different roles and permissions to each user.

How do I create a new WordPress user?

Go to Users → Add New User, enter the account information, select a role, and click Add New User.

Can I create a WordPress user without being an Administrator?

Only users with sufficient capabilities can create new users. Standard WordPress roles do not all have permission to manage users.

What is the best role for a blog writer?

The Author role may be appropriate when the writer needs to publish and manage their own posts. A Contributor can be useful when articles should be reviewed before publication.

Should I give an employee Administrator access?

Only if the person genuinely needs administrative capabilities. If their responsibilities are limited to content management, a less-privileged role may be more appropriate.

Can a WordPress user change their own password?

Yes. Users can generally change their password from their profile, and they can use the password recovery process if they forget it.

Can I delete a WordPress user without deleting their posts?

Yes. When deleting a user who owns content, WordPress can provide an option to attribute that content to another user rather than deleting it.

Can visitors register themselves on WordPress?

Yes, if user registration is enabled. You can manage the built-in registration setting under Settings → General.

Can I customize WordPress user roles?

Yes. Plugins and custom development can add roles or modify capabilities. Be careful when changing permissions because incorrect configurations can give users more access than intended.

How many users can WordPress have?

WordPress does not impose a small fixed limit on the number of users you can create. The practical limit depends on your hosting environment, database, website configuration, and workload.

---

WordPress User Management Checklist

Before giving someone access to your website, check:

• Create a separate account for the user
• Use a valid email address
• Generate a strong password
• Assign the appropriate role
• Enable multi-factor authentication where appropriate
• Avoid unnecessary Administrator privileges
• Confirm the user can perform required tasks
• Review inactive accounts regularly
• Remove access when it is no longer required
• Keep WordPress and plugins updated

---

Conclusion

Creating users in WordPress is an effective way to give different people access to your website without sharing a single login account.

To create a user, go to:

Users → Add New User

Enter the user’s information, create a strong password, select the appropriate role, and click Add New User.

The most important part of user management is choosing the correct role. Administrators have extensive control, while Editors, Authors, Contributors, and Subscribers have progressively more limited capabilities.

For better security, create individual accounts, use strong passwords, enable additional authentication where appropriate, regularly review user permissions, and remove accounts that are no longer needed.

Proper WordPress user management makes collaborative websites easier to operate while helping you maintain control over who can access and modify your site.