If you own or are authorized to manage a WordPress site and have been locked out, you can create an administrator account directly in phpMyAdmin by adding one row to the prefixed users table and one capabilities row to the prefixed usermeta table. Back up the database first, use the exact table prefix from wp-config.php, and change the temporary password immediately after you regain access.
Antihost offers managed WordPress hosting with free migration, one-click staging and a 14-day free trial.
This is a recovery procedure, not the normal user-creation workflow. A typo in the prefix, user ID, serialized role value, or password function can leave the account unable to log in or give it the wrong permissions.
As an Amazon Associate I earn from qualifying purchases.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →When adding an administrator in phpMyAdmin is appropriate
Use this method only when you control the site or have explicit authorization from its owner. It is useful when every administrator account is inaccessible, a password-reset email cannot be delivered, or a damaged account record prevents normal recovery.
Database editing bypasses WordPress checks that normally run when an account is created through the dashboard. Before changing anything:
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
- Export a complete copy of the WordPress database and keep it outside the server.
- Confirm that you have permission to alter the site and know how to restore the export.
- Plan to remove unfamiliar accounts and rotate passwords after you get back in.
- Determine whether the installation is a normal single site or a multisite network. A multisite super administrator uses a different setting.
Which WordPress tables and values control the account
The account is assembled from two tables. The site-wide list of available role definitions is separate and should not be edited merely to add one user.
| Location | What it stores | Value used for this recovery |
|---|---|---|
<prefix>users |
The login record | A unique ID, login name, password value, nicename, email address, and registration time |
<prefix>usermeta |
Per-user settings and capabilities | <prefix>capabilities with the serialized administrator value |
<prefix>options |
Site-wide options and role definitions | <prefix>user_roles defines the roles available on that site; do not change it for this task |
<prefix>sitemeta on multisite |
Network-level settings | site_admins controls super administrators and is not replaced by a normal usermeta row |
The default prefix is wp_, but many hosts change it. If the prefix is abc7_, the tables are abc7_users and abc7_usermeta, and the capability key is abc7_capabilities. Replace the prefix everywhere; mixing prefixes creates a record WordPress will not read.
Prepare phpMyAdmin safely
1. Find the database and prefix
Open the site files and read $table_prefix in wp-config.php. The same file identifies the database name in DB_NAME. Select that database in phpMyAdmin, not a similarly named staging or test database.
2. Make an export before editing
In phpMyAdmin, select the database, choose Export, select a complete export using the available SQL format, and save the file. Do not proceed until you know where the export is stored and how you would import it if an edit goes wrong.
3. Check whether the site is multisite
Look for network tables such as <prefix>sitemeta and the multisite configuration in the site files. A normal administrator can manage one site. A network super administrator is controlled by the site_admins option in sitemeta, so the single-site procedure below does not by itself grant network-wide super-admin access.
Step-by-step: create the user in phpMyAdmin
1. Inspect existing IDs and accounts
Open the prefixed users table and choose Browse. Record the highest existing ID, the login names, and the email addresses. The new ID must be unused, and the login name should be distinct from every existing account. Inspecting the table first also helps you recognize the column layout used by this installation.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsRank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
You can run this read-only query from phpMyAdmin’s SQL tab, replacing the table name with your real prefix:
SELECT ID, user_login, user_email FROM wp_users ORDER BY ID DESC LIMIT 20;Choose an unused integer ID after reviewing the result. Do not overwrite an existing row simply because its account looks abandoned; preserve it until you have a backup and have verified ownership.
2. Insert the login row into the users table
Open the prefixed users table and choose Insert. Fill the columns as follows. The examples are deliberately ordinary values; use your own unique login and mailbox.
| Column | What to enter |
|---|---|
ID |
An unused integer that you confirmed in the previous step |
user_login |
The name you will type on the WordPress login screen, such as recoveryadmin |
user_pass |
A strong, one-time temporary password; select the MD5 function in phpMyAdmin’s Function menu for this field, as the reviewed tutorials instruct |
user_nicename |
A URL-friendly version of the login, such as recoveryadmin |
user_email |
An address you control and can use for later password recovery |
user_registered |
The current date and time for the site, normally entered as YYYY-MM-DD HH:MM:SS |
Leave optional columns at their existing defaults unless your table requires a value. In particular, do not place the plaintext password in the database. Enter it in the value box, choose MD5 from that row’s Function selector, and let phpMyAdmin store the transformed value.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Click Go, then return to Browse and confirm that the new row has the ID and login you intended. If phpMyAdmin reports a duplicate-key error, cancel the operation, inspect the conflicting row, and choose a different ID or login rather than replacing data.
3. Add the administrator capability row
Open the prefixed usermeta table and choose Insert. Leave umeta_id empty so the table can assign its auto-increment value. Enter:
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
| Column | Value |
|---|---|
user_id |
The new user’s ID from the users row |
meta_key |
The exact prefix followed by capabilities, for example wp_capabilities or abc7_capabilities |
meta_value |
a:1:{s:13:"administrator";b:1;} |
The value is a PHP-serialized array. s:13 records the length of the word administrator, and b:1 means Boolean true. Preserve every brace, semicolon, colon, and character count. The capability key belongs in usermeta; there is no separate capabilities table to edit.
Some tutorials use s:1:"1" instead of b:1. The Boolean form above is the commonly recommended form in the reviewed instructions. If a known-good administrator row on your site uses the alternate representation, match that established local format rather than changing unrelated accounts.
Recommended Free Tools
4. Consider the legacy user-level row
Older tutorials also insert a second usermeta row:
| Column | Value |
|---|---|
user_id |
The new user’s ID |
meta_key |
The prefixed key, such as wp_user_level |
meta_value |
10 |
The user-level key has been described as deprecated since WordPress 3.0. Treat it as optional compatibility data, not as the setting that grants the administrator role. The capabilities row is the important assignment. Adding the legacy row is reasonable only when an older theme or plugin on this particular site demonstrably expects it.
Use SQL instead of the Insert screens
The same records can be entered from phpMyAdmin’s SQL tab. Replace the table prefix, ID, login, email, and timestamp with the values you selected. The password shown is an example only; use a unique temporary value and change it immediately after login.
INSERT INTO wp_users (ID, user_login, user_pass, user_nicename, user_email, user_registered)
VALUES (1234, 'recoveryadmin', MD5('Temp-Admin-2026-Change-Immediately!'), 'recoveryadmin', '[email protected]', CURRENT_TIMESTAMP);If your database server does not accept CURRENT_TIMESTAMP in this statement, enter the current time explicitly in the format used by the table. Then add the capability row:
INSERT INTO wp_usermeta (user_id, meta_key, meta_value)
VALUES (1234, 'wp_capabilities', 'a:1:{s:13:"administrator";b:1;}');For a custom prefix, change both table names and the meta_key; for example, use abc7_usermeta and abc7_capabilities. Run each statement once, then query the rows before attempting to log in. Explicit IDs make the relationship easy to verify, but they also make it essential that you selected an unused number.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Verify the records before logging in
Run a read-only query that joins the new account to its metadata. Use your actual prefix and ID:
SELECT u.ID, u.user_login, u.user_email, m.meta_key, m.meta_value
FROM wp_users AS u
LEFT JOIN wp_usermeta AS m ON m.user_id = u.ID
WHERE u.ID = 1234;Confirm that the login row exists, the capability key contains the same prefix as the table, and the serialized value is intact. If the query returns no capability row, do not test the dashboard yet; correct the usermeta insert first.
Log in and test the permissions
- Open the site’s normal WordPress login URL and enter the new
user_loginand temporary password. - Once authenticated, open Users and confirm that the account appears as an administrator. Review the complete users list for accounts you do not recognize.
- Open Tools and test the administrative screens you actually need. A successful login alone does not prove that the capability metadata was read correctly.
- Change the password from the profile screen to a new, unique password that was never stored in the database as plaintext. Confirm that the recovery email is correct and protected.
WordPress and plugin code should test permissions with capabilities such as current_user_can(), not by assuming a role-name comparison. That is why the capability metadata must be correct even when the dashboard appears to show the expected role.
Troubleshooting branches
The new account cannot log in
First verify the exact user_login, the database you edited, and the password function used for user_pass. The reviewed tutorials recommend an MD5 function in phpMyAdmin, but the available material does not establish how every current WordPress 6.x release handles an MD5-inserted password or whether it immediately forces a rehash. Do not treat MD5 as a long-term password format. If the credentials still fail after checking the spelling and database, stop making repeated edits and use a version-appropriate, authorized password-reset method for the site.
Free tools Windows power users keep installed
One-click scans. No signup required.
The dashboard opens but says you do not have permission
Check the usermeta row. The user_id must equal the users-table ID; meta_key must be the site’s real prefix followed by capabilities; and meta_value must be the complete serialized administrator array. A row under wp_capabilities will not work on a site whose prefix is different.
phpMyAdmin reports a duplicate key
Read the conflicting users or usermeta row before changing anything. A duplicate ID means the chosen ID is already used. A duplicate login indicates that the login name already exists. Choose a new unused value and insert a separate row; do not overwrite a legitimate account to make the error disappear.
The role appears incorrectly or disappears
Compare your serialized value with a known-good administrator row on the same site. Check that the word length is 13, the array count is 1, and the Boolean is b:1. Also verify that you did not accidentally edit the site-wide user_roles option instead of the per-user capabilities row.
You edited a multisite network
A normal site administrator row can grant administration for one site, but it does not make the account a network super administrator. Multisite super-admin membership is stored in the site_admins option in the prefixed sitemeta table. Use the network’s documented recovery procedure and make a separate backup before touching that option.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Secure the site after access is restored
Database recovery should end with an account audit, not with the first successful login. Remove accounts you cannot authorize, change passwords for existing administrators if the database or hosting account may have been exposed, and review recent changes made by unknown users. Recheck the users list after plugins and themes load, because those components can create or modify accounts.
Keep the export until you have confirmed that the site works normally, then store or destroy it according to your security policy. A database export contains credentials, email addresses, and other private data; it should not remain in a publicly reachable web directory.
Limits and version considerations
This workflow is documented mainly by tutorials and support discussions rather than a single current WordPress Developer Handbook procedure. No source reviewed for this guide verifies the complete sequence on a named WordPress 6.x release dated 2026. The account schema and prefixed capability concept are stable enough to explain the recovery steps, but password hashing behavior and the practical need for the deprecated user-level key should be checked against the version and plugins running on your site.
If you can still reach any administrator account, use WordPress’s normal Users screen instead. Reserve direct phpMyAdmin edits for authorized recovery, keep the backup, and make the smallest possible database change.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
