Changing the WordPress admin email address sounds like a five-second job until you do it wrong and lock yourself out of your own site. I’ve seen it happen. Someone updates the admin email to a typo, WordPress sends a confirmation link to a dead inbox, and suddenly nobody can reset the password when they need it most.
The WordPress admin email change itself is easy. What matters is doing it in the right order, with the right confirmations, so you don’t break your own recovery path.
Where WordPress Actually Stores the Admin Email
Two very different things get confused here. The admin user email lives in the user profile under Users → All Users. The site administration email lives in Settings → General and handles things like new user notifications, password resets you trigger, and plugin alerts.
If you only change one and not the other, you’ll keep getting notifications on an address you thought you retired. I’ve fixed this for clients more times than I can count. Change both, in the right order, or you’ll be chasing phantom emails for weeks.
Step 1: Find the Administrator Account (Not Just Any Admin)
Log into wp-admin and go to Users → All Users. If your site is small, the admin is right there. If it’s grown, filter by role.
- Use the Filter by role dropdown and select Administrator. That isolates accounts with full privileges.
- Or type the username in the search box, hit Filter, and click through.
Watch out: on multi-admin sites, you might see several administrators. The one you need is the account tied to the original install, usually the first user ID (check the URL when hovering — user_id=1 is often the founder account). Changing the wrong admin’s email is a rookie move that creates chaos later.
Step 2: Update the Admin User Email
Click the username to open the profile editor. Scroll to the Contact Info section — that’s where the Email field sits.
Type the new address, then hit Update Profile. Here’s the bit most tutorials skip: WordPress sends a confirmation email to the NEW address. You must click that link, or the change doesn’t fully take effect. If you don’t have access to that inbox yet, don’t touch the field. Full stop.
Once confirmed, log out and test. Use the «Lost your password» link on the login screen with the new email. If the reset email arrives, the WordPress admin email change worked. If it doesn’t, revert immediately to the old address before you lose your safety net.
Step 3: Update the Site Administration Email in Settings
Now go to Settings → General. The Administration Email Address field is separate from the user profile. This is the address WordPress uses for admin-level notifications: new user registrations, comment moderation alerts, security plugin warnings, automatic update failures.
Plugins like Wordfence, WP Rocket, and Yoast often pull from this field. If you leave it pointing at an old inbox, you’ll miss critical alerts — including the ones telling you someone is trying to brute-force your login. Change it, save, and confirm you can receive mail there.
What If You Can’t Access the Old Email Anymore?
This is the real-world scenario nobody writes about. You inherited a site. The old developer’s email is gone. You can’t receive the confirmation link.
Options, ranked by how much I trust them:
- phpMyAdmin or WP-CLI — edit the user_email value in the wp_users table directly. This bypasses confirmation entirely. Fast and reliable if you know what you’re doing.
- WP-CLI command: wp user update 1 –user_email=new@email.com. One line, done.
- Database export/edit/import — slower but works when you don’t have shell access.
Don’t try to «hack» it through plugin settings. Go to the database. It’s the only path that doesn’t depend on an inbox you don’t control.
Common Mistakes That Break Admin Access
I’ve watched people lose entire afternoons to these. Avoid them:
- Typo in the email. No confirmation link, no confirmed change, silent failure.
- Changing only one of the two fields. Notifications split across two inboxes.
- Using an email on the same domain. If your mail server goes down, password resets die with it. Use a separate provider like Gmail or Proton for admin recovery.
- Forgetting to update it in your hosting or DNS records. Contact forms and SMTP plugins may still reference the old address.
The change WordPress admin email task is really about redundancy. You want at least one recovery path that doesn’t depend on a single inbox, a single device, or a single person who might disappear.
Best Practices I Actually Recommend
Use a dedicated admin email, not your personal one. Something like admin@yoursite.com or a role-based Gmail. That way, when you hand the site off to a client or team member, you’re not handing over your identity.
Set up email forwarding from the admin address to a monitored inbox. That gives you two layers: if the primary fails, forwarding catches it. And enable two-factor authentication on the email account itself — an admin email without 2FA is a single point of failure.
