Problem: The default admin user account is not secure.

Why is this? First, the accounts username is always "admin" to start with. Now it is simple enough to change the username in the User Manager, but this is often left unchanged.

Second, the user id number associated with admin account is always "62". Changing this would involve a much more complicated procedure involving the database.

Hackers, armed with the above knowledge they may be able to use SQL injection and to change the password.

Solution: Create a new, more secure admin account and delete the default account.

This tutorial will take you through the essential steps for deleting the default "Admin" account and replace it with one that is more secure.

Note: This procedure in no way guarantees the security of your site. For more information regarding improving the security of your site go to the official Joomla Security Center

Step 1 - Create Your New Administrator Account

Login into the Joomla Administrator site using default Admin and Password

Click "User Manager" on the dashboard. (You can also navigate to the User Manager via the "Site" Menu at the top.)

The "User Manager" will show all the user accounts of your Joomla site.

Click "New" in the top right corner

Complete User Details as Shown:

• Name: Use your regular name if you like.
• Username: It is best that your username not be the same as your name. Keep it simple but also difficult to guess.
• New Password + Verify Password: Make it as long and complicated as possible. You might want to use a password generator tool. (Search for the words "Password Generator.")
• Group: Select "Super Administrator"
• Block User: Select "no"
• Receive System E-mails: Select "Yes"

Click "Save"

You will see your new account in the User Manager.

Click "Logout" in the top right corner.

Step 2 - Change Default Admin Account Group

Login using the new admin username and password

Again, go to "User Manager"

Select the default account and click "Edit"

Why not just delete it? Joomla does not allow Super Administrator accounts to be deleted. It's group must first be chanded to "Administrator."

Under 'User Details' change the group to "Administrator" and click "Save"

Step 3 - Delete Default Admin Account

Once the group has been changed to "Administrator" you can now delete the account

Select the original admin account and click 'Delete'

Setting the Stage: Create the Content Section and Content Category

Create the Content Section.

Note: Creating a content section will not be necessary in Joomla! 1.6

Select "Section Manager" from the "Content" menu

Once on the Section Manager page click "New"

For title "Blogs" and click "Save"

You will see the content Section, "Blogs" has been created.

---

Create the content Category

Click "Category Manager" in the "Content" menu.

Once you are in the category manager click "New".

For Title enter "My Blog".

For Section select "Blogs"

Click "Save"

You will see that your category has been created

Now you are ready to create your first article

Create your first article

Select "Article Manager" in the "Content" Menu. One inside the Article Manager, select "New".

• Enter the title of your article
• In Section select "Blogs" and "My Blogs" under Category
• in the editor write your article.
• Tip: Save your work as you go by clicking "Apply".

Once you are finished click "Save".

You should now see your article listed in the Article Manager.

Create menu item linking to the blog

In order for your blog to appear on your website you must create a menu link to it.

To create the menu link select "Main Menu" under "Menus"

Once you can see all the "Main Menu" items click "New".

In Joomla! there are many different types of links that can be created. For your block click "Articles" under "Internal Link".

The Articles link will expand to a tree-like view. Select Category Blog Layout under "Category".

for "Title" enter "My Blog" and select "Blogs/My Blogs" under category.

Click "Save"

You will see the menu item leading to your blog appear in the Menu Item Manager for the Main Menu.

Go to your website and "Refresh". You should see your new blog is available to view