How to Add a WordPress User: Complete 2026 Step-by-Step Guide
To add a WordPress user, go to Users → Add New in your dashboard, enter the username and email, set a strong password, select the appropriate role (Administrator, Editor, Author, Contributor, or Subscriber), and click Add New User. The new user will receive an email with their login credentials if you enable the notification option.
Adding users to WordPress is essential for collaborating with team members, guest authors, developers, or clients. WordPress provides built-in user management tools that let you control exactly what each person can access and do on your site.
This 2026 guide shows you exactly how to add a WordPress user using multiple methods—dashboard, email invitation, plugins, WP-CLI, and database—plus best practices for security and role assignment.
Last updated: September 2026
Why You Need to Add WordPress Users
WordPress is designed for collaboration. Whether you run a blog with multiple writers, an e-commerce store with staff, or an agency managing client sites, adding users lets you:
Delegate content creation and editing tasks
Give developers limited access without full admin control
Allow clients to manage their own site content
Track individual contributions with separate accounts
Improve security by avoiding shared logins
Understanding user roles and permissions is critical for maintaining a secure, well-organized WordPress site.
Understanding WordPress User Roles
Before adding a user, choose the right role based on their responsibilities. WordPress includes six default roles, each with specific capabilities.
Administrator
Capabilities: Full control over the site—manage users, install plugins/themes, change settings, create/edit/delete all content.
Use for: Site owners, lead developers, trusted technical managers.
Security note: Limit Administrator accounts to 2–3 people maximum.
Editor
Capabilities: Publish, edit, and delete any post or page (including others’), manage categories/tags/comments, moderate all comments. Cannot install plugins or change site settings.
Use for: Senior content managers, head writers, editorial supervisors.
Author
Capabilities: Write, edit, publish, and delete their own posts; upload files to Media Library. Cannot edit others’ content or access site settings.
Use for: Regular blog contributors, staff writers, guest authors who publish independently.
Contributor
Capabilities: Write and edit their own drafts; submit posts for review. Cannot publish or upload files.
Use for: Guest writers, first-time contributors, users whose content requires editorial approval.
Subscriber
Capabilities: Manage their own profile (change password, update email), view their own comments. Cannot write posts or access admin features.
Use for: Registered users who need minimal access (e.g., for comments or memberships).
Super Admin (Multisite Only)
Capabilities: Manage every site in a WordPress Multisite network, install/activate plugins network-wide, create/delete subsites.
Use for: Network administrators managing multiple WordPress sites.
Check: WordPress user roles explained
Method 1: Add a WordPress User via Dashboard (Easiest)
This is the standard method for most WordPress sites.
Step 1: Log Into WordPress Dashboard
Visit yoursite.com/wp-admin and log in with an Administrator account. Only Administrators (or Super Admins in multisite) can add new users.
Step 2: Navigate to Users → Add New
In the left sidebar:
Hover over Users.
Click Add New.
Step 3: Enter User Details
Fill in the required fields:
Username (required): Unique identifier—cannot be changed later. Use lowercase letters/numbers (no spaces).
Email (required): User’s valid email address—required for password resets and notifications.
First Name (optional): Displayed in author bio.
Last Name (optional): Displayed in author bio.
Website (optional): Link to user’s personal or professional site.
Step 4: Set a Strong Password
Click Show Password to reveal the password field.
WordPress auto-generates a strong password (recommended).
Copy it to share with the user securely.
Or create a custom password (use the strength meter to ensure it’s strong).
Step 5: Select User Role
From the Role dropdown, choose the appropriate role:
Administrator (full control)
Editor (manage all content)
Author (publish own posts)
Contributor (submit drafts)
Subscriber (minimal access)
Step 6: Send User Notification
Check the box “Send User Notification” to email the user their login details.
The email includes:
Username
Password reset link
Login page URL
Uncheck this box if you prefer to share credentials manually.
Step 7: Click Add New User
Click the Add New User button at the bottom of the page.
The new user now appears in your Users list with the assigned role.
Method 2: Invite Users by Email (WordPress.com & Some Plugins)
WordPress.com and certain plugins allow you to invite users via email without manually creating accounts.
On WordPress.com
Go to Users → Invite New in your dashboard.
Enter the user’s email address.
Select their role.
Click Send Invitation.
The user receives an email to accept the invitation and set up their account.
With Plugins (e.g., User Role Editor, Members)
Some plugins add email invitation features to self-hosted WordPress sites. Install the plugin, navigate to its invitation interface, and follow similar steps.
Method 3: Add a WordPress User with a Plugin
Plugins like User Role Editor, Members, or WPForms can extend user creation capabilities with custom roles, bulk user creation, or frontend registration forms.
Example: Using WPForms for Frontend Registration
Install and activate WPForms.
Create a User Registration form.
Configure form fields (username, email, password, role).
Embed the form on a page.
Users can register themselves with pre-assigned roles.
Check the post: custom WordPress roles and capabilities
Method 4: Add a WordPress User via WP-CLI (Advanced)
For developers or agencies managing multiple sites, WP-CLI allows fast, scriptable user creation.
Prerequisites
SSH access to your server
WP-CLI installed on your host
Command to Create a User
wp user create example_username email@example.com --role=subscriber --send-emailReplace:
example_usernamewith the desired usernameemail@example.comwith the user’s email--role=subscriberwith the appropriate role (administrator, editor, author, contributor, subscriber)
Example: Create an Editor
wp user create johndoe email@example.com --role=editor --send-emailThe --send-email flag triggers the WordPress notification email.
Method 5: Add a WordPress User via phpMyAdmin (Database Method)
For advanced users who need to create users directly in the database (e.g., when locked out of wp-admin).
Warning
This method is risky—incorrect database edits can break your site. Always back up first.
Step 1: Access phpMyAdmin
Log into cPanel → Databases → phpMyAdmin. Select your WordPress database.
Step 2: Insert into wp_users Table
Run this SQL query (adjust table prefix if needed):
INSERT INTO wp_users (user_login, user_pass, user_nicename, user_email, user_registered, user_status, display_name)
VALUES ('newuser', MD5('password123'), 'newuser', 'email@example.com', NOW(), 0, 'New User');Step 3: Get the New User ID
SELECT ID FROM wp_users WHERE user_login = 'newuser';Note the returned ID (e.g., 42).
Step 4: Insert into wp_usermeta Table
Add the user’s capabilities and level:
INSERT INTO wp_usermeta (user_id, meta_key, meta_value)
VALUES (42, 'wp_capabilities', 'a:1:{s:13:"administrator";b:1;}'),
(42, 'wp_user_level', '10');Replace 42 with the actual user ID and wp_ with your table prefix.
Special Case: WooCommerce Customer and Shop Manager Roles
If you run a WooCommerce store, you’ll see two additional roles:
Customer
Capabilities: View order history, manage account details, place orders. Similar to Subscriber but with e-commerce features.
Use for: Shoppers who create accounts during checkout.
Shop Manager
Capabilities: Manage orders, products, coupons, customers, and WooCommerce reports. Cannot install plugins or change site-wide settings.
Use for: Store staff who handle daily operations without needing full Administrator access.
Best Practices for Adding WordPress Users
Use Individual Accounts
Never share a single login among multiple people. Individual accounts enable accountability, audit trails, and secure offboarding.
Apply Least Privilege
Give users the minimum role required for their tasks. Start with Contributor or Author, and upgrade only if necessary.
Enable Two-Factor Authentication (2FA)
For Administrators and Editors, require 2FA using plugins like Wordfence, WP 2FA, or your host’s security tools.
Send Notification Emails
Always enable “Send User Notification” so users receive secure password reset links instead of plain-text passwords.
Document User Roles
Keep a simple record of:
Who has which role
Why they need it
When access should be reviewed or revoked
Review Users Quarterly
Schedule quarterly audits to:
Remove inactive accounts
Downgrade overprivileged users
Verify 2FA is enabled on privileged accounts
Visit this page for more details: WordPress Role Security Checklist
Common Mistakes to Avoid
Giving Too Many Users Administrator Access
Every additional Administrator multiplies your attack surface. Limit to 2–3 trusted people.
Using Weak or Shared Passwords
Never use passwords like admin123 or share the same password across accounts. Use WordPress’s auto-generated passwords or a password manager.
Skipping Email Notifications
Sending credentials via email is more secure than sharing passwords in chat or documents. Let users set their own passwords via reset links.
Not Removing Former Team Members
When someone leaves your team, immediately remove or downgrade their account. Lingering access is a common security gap.
Ignoring Plugin-Specific Roles
Some plugins (membership, LMS, e-commerce) add custom roles. Review these when auditing user access.
Troubleshooting: Why Can’t I Add a WordPress User?
Missing “Add New” Button
Cause: You’re not logged in as an Administrator, or you’re on a WordPress.com restricted plan.
Fix: Log in with an Administrator account or upgrade your WordPress.com plan.
“You do not have permission to add users”
Cause: Your role lacks the create_users or promote_users capability.
Fix: Ask an Administrator to upgrade your role or add the user for you.
Email Notification Not Sending
Cause: Server email configuration issue or spam filter.
Fix: Check spam folder, verify server email settings, or manually share the password reset link.
Username or Email Already Exists
Cause: WordPress requires unique usernames and email addresses.
Fix: Use a different username or email, or edit the existing user account.
How to Edit or Delete a WordPress User
Edit a User
Go to Users → All Users.
Hover over the user’s name.
Click Edit.
Update details (name, email, role, password).
Click Update User.
Delete a User
Go to Users → All Users.
Check the box next to the user.
Select Delete from the bulk actions menu.
Choose whether to attribute their content to another user or delete it.
Click Apply.
Important: Always attribute content to another user before deletion to avoid losing posts or pages.
Frequently Asked Questions
Can I add a WordPress user without an email address?
No. WordPress requires a valid email address for every user account—it’s used for password resets, notifications, and account recovery.
Can I change a username after creating the user?
No. Usernames are permanent in WordPress. If you need a different username, create a new account and delete the old one (attributing content first).
How do I add multiple users at once?
Use a plugin like Import Users from CSV, Bulk User Creator, or WP-CLI scripts to create multiple users in bulk.
Can users register themselves on my site?
Yes. Go to Settings → General and check “Anyone can register”. Set the default role to Subscriber or Contributor. For more control, use a registration plugin like WPForms or Ultimate Member.
What role should I give a freelance writer?
Typically Author (if they publish their own posts) or Contributor (if their work requires editorial approval). Avoid Editor or Administrator unless they manage other writers.
How do I add a user on WordPress.com?
Go to Users → Invite New, enter their email, select their role, and send the invitation. They’ll receive an email to accept and set up their account.
Can I add a user via FTP?
No. User accounts are stored in the database, not files. Use the dashboard, WP-CLI, or phpMyAdmin to add users.
Discover more from WORDPRESS ROLE
Subscribe to get the latest posts sent to your email.
