Problem: The default admin user account is not secure.

Why is this? First, the accounts username is always "admin" to start with. Now it is simple enough to change the username in the User Manager, but this is often left unchanged.

Second, the user id number associated with admin account is always "62". Changing this would involve a much more complicated procedure involving the database.

Hackers, armed with the above knowledge they may be able to use SQL injection and to change the password.

Solution: Create a new, more secure admin account and delete the default account.

This tutorial will take you through the essential steps for deleting the default "Admin" account and replace it with one that is more secure.

Note: This procedure in no way guarantees the security of your site. For more information regarding improving the security of your site go to the official Joomla Security Center

Step 1 - Create Your New Administrator Account

Login into the Joomla Administrator site using default Admin and Password

Click "User Manager" on the dashboard. (You can also navigate to the User Manager via the "Site" Menu at the top.)

The "User Manager" will show all the user accounts of your Joomla site.

Click "New" in the top right corner

Complete User Details as Shown:

• Name: Use your regular name if you like.
• Username: It is best that your username not be the same as your name. Keep it simple but also difficult to guess.
• New Password + Verify Password: Make it as long and complicated as possible. You might want to use a password generator tool. (Search for the words "Password Generator.")
• Group: Select "Super Administrator"
• Block User: Select "no"
• Receive System E-mails: Select "Yes"

Click "Save"

You will see your new account in the User Manager.

Click "Logout" in the top right corner.

Step 2 - Change Default Admin Account Group

Login using the new admin username and password

Again, go to "User Manager"

Select the default account and click "Edit"

Why not just delete it? Joomla does not allow Super Administrator accounts to be deleted. It's group must first be chanded to "Administrator."

Under 'User Details' change the group to "Administrator" and click "Save"

Step 3 - Delete Default Admin Account

Once the group has been changed to "Administrator" you can now delete the account

Select the original admin account and click 'Delete'