---
title: User “admin” with administrator privileges
canonical: https://wpsecurityninja.com/docs/security-tests/user-admin-with-administrator-privileges-exists/
---
This security test checks whether a WordPress user named `admin` has the Administrator role. That username is the first one many brute-force scripts try.

## Why it matters

Attackers already know half of the credentials if the username is `admin`. Use a unique administrator username and a strong password (and [2FA](https://wpsecurityninja.com/docs/firewall/how-to-set-up-two-factor-authentication-2fa-in-security-ninja/) when available).

## How to run the test

1. Open **WP Security Ninja → Security Tests**.
2. Run the test named like “Check if user with username ‘admin’ and administrator privileges exists.”
3. If it fails, create a new administrator with a unique username, transfer content if needed, then delete or demote the `admin` account.

## How to fix it

1. Log in as an administrator.
2. Go to **Users → Add New** and create a new Administrator with a non-guessable username.
3. Log out, then log in as the new user.
4. Go to **Users**, edit the old `admin` user, and either delete it (assigning content to the new user) or change its role so it is no longer an Administrator.
5. Re-run the security test to confirm it passes.

Pro users may see a one-click fix for related issues on the Fixes page when available.

## Related

- [Block “admin” login attempts](https://wpsecurityninja.com/docs/firewall/how-to-use-the-firewall/) (Pro login protection)
- [Two-factor authentication](https://wpsecurityninja.com/docs/firewall/how-to-set-up-two-factor-authentication-2fa-in-security-ninja/)