Password reset not initiated

  • Hi. I received a message today that says
    “Someone has request a password reset for your account: username:admin. If this was a mistake, just ignore this email and nothing will happen. To reset your password, visit the following address:”

    Sent from [ redacted ]

    Is this an official wordpress email?

Viewing 1 replies (of 1 total)

  • It could be a spoofed email, hard to tell from here, but it has the text that is used when the Forgot Your Password link is clicked.
    If that domain is yours, then likely someone clicked the link and entered the admin username.

    It is better if you don’t have a user called admin. Security plugins can help rename this for you. Also, once it’s changed, they can blacklist anyone attempting to login with admin.

Viewing 1 replies (of 1 total)
  • The topic ‘Password reset not initiated’ is closed to new replies.