# How to fix the exposed "admin" author in WordPress

> /?author=1 reveals the first user's login name. Rename the default admin account and disable author enumeration.

WordPress & WooCommerce · HTML version: https://getreport.app/learn/wordpress-author-slug

## Default admin author

Passing looks like: No default admin author exposed.

**Why it matters.** /?author=1 redirects to /author/admin/, which confirms a login name called "admin" exists. Brute-force scripts try that name first.

**How to fix it.**

1. Create a new administrator with a unique username, log in as it, delete "admin" and attribute its content to the new user.
2. Optionally disable author archives or the ?author= redirect in your security plugin.

Check your own page: https://getreport.app/