Account Creation
Main user accounts are created during the site migration or onboarding process. However, Site Administrators also have the ability to manually add new users at any time.
Only users with the appropriate administrative permissions can create new accounts.
Adding a New User (Administrator Only)
To add a new user:
Navigate to Users → Add New in the WordPress dashboard.
Complete the required fields:
Username (required)
Email Address (required)
Optional fields include:
First Name
Last Name
Website
Language
Providing first and last name is recommended for clear identification of users.
Creating a Password
When creating a new user account, you may:
Enter a custom password, or
Use the Generate Password option
The platform will automatically indicate whether the password meets strong security standards. It is strongly recommended to use a generated password or ensure the password is classified as strong.
Sending User Notification (Recommended)
Before finalizing the new account, you will see an option to:
Send User Notification
This option is strongly recommended.
When selected:
The user will receive an email notification
The email contains login instructions
The user can securely access their account
Avoid manually sending passwords through email, text message, or unsecured communication channels.
Assigning a Role
Before saving the user, you must assign a role.
User roles determine what actions the individual can perform on the site.
Common roles include:
Site Admin – Full access to manage users, settings, and content
Editor – Can create, edit, and publish content
Author – Can create and publish their own posts
Contributor – Can write posts but cannot publish
Subscriber – Limited access (profile only)
Users should be assigned the minimum level of access necessary for their responsibilities.
Signing In
Once an account has been created, users can sign in by:
Navigating to the site login page
Entering either:
Their username, or
Their email address
Entering their assigned password
Agreeing to Terms (via Checkbox)
Clicking Log In
If a user forgets their password, they may use the “Lost your password?” link to reset it.
Password Security Guidance
At this time, Multi-Factor Authentication (MFA) is not enabled on the platform. Site Administrators cannot install plugins or configure MFA independently. A centralized MFA solution is planned for future deployment.
Until MFA is implemented, strong password practices are essential.
Password Requirements
Passwords should:
Be at least 16-24 characters long
Include uppercase and lowercase letters
Include numbers
Include special characters
Be unique to this platform
Avoid:
Reusing passwords from other websites
Using names, birthdays, or simple words
Sharing passwords through unsecured channels
Strong Password example:
RouLqeIGaVE8FrfR4iQpOQ@u
Secure Password Storage
Passwords should never be stored in:
The Notes app
Word or Google documents
Email drafts
Shared documents
Plain text files
Instead, it is strongly recommended to use a secure password manager such as:
Password managers encrypt and securely store credentials, reducing the risk of unauthorized access.
Security Best Practices
Always use strong, unique passwords
Use a password manager
Do not share login credentials
Assign roles carefully
Log out of shared or public devices
Maintaining proper account security helps protect your website and your organization’s digital presence.