Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan NowHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
FREEDOM251

Freedom251 › Blog › Joomla

How to Reset a Joomla Administrator Password

By Freedom251 Team · · 9 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Use Joomla’s Forgot your Password? link first if you can receive mail at the administrator account. If no one can sign in, the supported recovery choices are the current configuration.php recovery procedure, a version-appropriate phpMyAdmin/MySQL edit, or Joomla’s command-line reset. After any emergency recovery, replace the temporary password from inside Joomla and remove temporary recovery changes.

Choose the recovery method that matches your access

The safest method is the one that changes the account through Joomla itself rather than editing files or database rows. Use the table below before making a change; it prevents an unnecessary database edit and shows what must be cleaned up afterward.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Access you have Best method Relative risk Version sensitivity Cleanup
The account email and a working Joomla mail path Frontend Forgot your Password? Lowest Low Set a permanent password after signing in
A signed-in Super User or Administrator Edit the user in Users / Manage Low Low None beyond confirming the new credentials
Server-file access, but normal login recovery is unavailable Current Joomla configuration.php recovery procedure Moderate High; follow the guide for the installed release Delete the temporary recovery line and restore file permissions
MySQL access through phpMyAdmin or another client Version-appropriate edit in the prefixed #__users table Higher Highest; password formats differ by release Change the password again in Joomla
SSH or another terminal plus PHP CLI php joomla.php user:reset-password --username=<username> Low to moderate Use the Joomla CLI supplied with that installation Confirm the account and remove any shell-history exposure

Before using a recovery path, confirm which Joomla installation and account you are changing. A site often has several users, and an Administrator account is not necessarily the Super User account that controls every backend action.

Reset the password with “Forgot your Password?”

This is the least invasive route because Joomla generates the reset process and does not require direct access to site files or MySQL.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
  1. Open the site’s administrator login page, or the public login module if it exposes the account-recovery link.
  2. Select Forgot your Password?.
  3. Enter the email address stored on the Joomla user account and submit the form.
  4. Open Joomla’s email and follow its confirmation-code or reset link instructions.
  5. Choose a new password and sign in at /administrator.

If no message arrives

  • Check the address carefully; the form must match the account’s stored email address.
  • Inspect spam, quarantine, and any mail gateway that filters automated messages.
  • Verify that the site can send mail and that its configured mail transport is functioning.
  • If the account address is inaccessible or the site cannot deliver mail, stop retrying the form and use a server, database, or CLI method for which you have authorization.

Do not disclose a reset code in a support ticket, screenshot, or chat. Treat it like the password itself and invalidate it by completing the reset or starting a fresh request.

Reset a user from an existing backend session

If another trusted account can still enter Joomla, use the user-management screen instead of an emergency recovery technique. Joomla’s user documentation states that when only an Administrator login exists, a Super User or Administrator must perform the reset.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Sign in to the Joomla administrator area with an account authorized to manage users.
  2. Open Users, then Manage.
  3. Search for the locked-out account and open its user record. Confirm the username and email before changing anything.
  4. Enter the new password in the password field and enter it again in the confirmation field.
  5. Save the user record.
  6. Sign out of the assisting account and test the recovered account at /administrator.

When the edit is blocked

An account may be visible but not editable if the assisting user lacks the required permissions, if the target is a higher-privilege account, or if access control rules restrict the user-management component. Do not work around a permission boundary by editing the database unless you are the site owner or an authorized administrator. Have a Super User perform the change or select another documented recovery path.

Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.

Use Joomla’s configuration.php recovery procedure

Joomla’s current Admin Password Recovery guide describes a file-based procedure for regaining a Super User account or creating a new one when ordinary login recovery is impossible. It is appropriate when you control the server files but cannot receive the account email and do not have a usable backend session.

What you need

  • Access to the correct Joomla installation’s files through hosting file management, SFTP, or another authorized server method.
  • A way to make and undo a small change to that installation’s configuration.php.
  • The exact recovery instructions for the Joomla release installed on the site.
  • A secure channel for the temporary credentials you will create.

Safe procedure

  1. Make a copy of configuration.php before editing it, and record its existing permissions.
  2. Open the file belonging to the affected Joomla installation, not a neighboring site in the same hosting account.
  3. Follow the current Joomla Admin Password Recovery guide exactly for your installed release. The guide’s temporary recovery change is release-sensitive; do not substitute a code fragment copied from an old forum post.
  4. Save the change, use the recovery account or recovered Super User path described by the guide, and sign in to the administrator area.
  5. Immediately set a strong permanent password through Joomla’s user interface.
  6. Remove the temporary recovery line from configuration.php.
  7. Restore the file’s original permissions and verify that the site still loads normally.

Leaving the temporary line in place can allow another person with knowledge of the procedure to regain access. The official guide specifically instructs you to change the Super User password once access is restored; treat that as a required final step, not an optional hardening task.

If the site breaks after the edit

Restore the saved copy, return the original permissions, and retry only after checking that you edited the correct installation and followed instructions for its Joomla version. Do not leave a malformed or half-removed recovery line in a production configuration file.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

Reset the account in phpMyAdmin or MySQL

A direct database change is a fallback for cases where email, backend access, and the file-based procedure are unavailable. It carries more risk because a wrong row, wrong table, or wrong password format can lock out the site or damage account data.

Prepare before editing

  • Confirm the Joomla release so that you can use the matching official database instructions.
  • Back up the database and verify that the backup can be restored.
  • Identify the database used by this Joomla installation; shared hosting accounts may contain several databases.
  • Have the target username in hand. Never select a row by guesswork when the site contains multiple accounts.

Locate the correct user row

  1. Open the site database in phpMyAdmin or an authorized MySQL client.
  2. Find the installation’s prefixed users table. Joomla documentation refers to it as #__users, where #__ is replaced by the prefix configured for that installation.
  3. Do not assume the table is named jos_users; many installations use a different prefix.
  4. Inspect the usernames and email addresses, and select the exact account intended for recovery.

Apply a version-appropriate password change

Edit the password value using the current Joomla recovery guide for the installed release. Older instructions that insert an MD5 value must not be applied blindly: Joomla documentation warns that such recipes can be obsolete for Joomla 5 and shows modern password values as bcrypt-style hashes. A hash copied from an unrelated release or generated with an unsuitable algorithm may be rejected or create an account that cannot authenticate.

Because the required value is version-sensitive, do not paste a guessed hash or an unverified SQL snippet. If you cannot establish the correct procedure for the installed release, use the configuration.php or CLI method instead, or ask an experienced Joomla administrator to perform the change.

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.

Finish the database recovery

  1. Save only the intended row change and confirm that no other user fields were modified.
  2. Sign in at /administrator with the temporary password.
  3. Open the account in Joomla’s user manager and set a new, unique password there. This application-level reset is safer than continuing to use an emergency database value.
  4. Review the account’s email address, enabled state, and assigned groups for unauthorized changes.

Avoid putting real passwords in SQL history, shared tickets, screen recordings, or screenshots. Restrict phpMyAdmin and MySQL access again when the recovery is complete.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Use Joomla’s command-line password reset

Joomla provides a supported CLI command when you have terminal access and PHP CLI available. This avoids manually constructing a password hash and is generally safer than editing a user row.

Requirements

  • Shell access to the server or container running the Joomla installation.
  • A working PHP CLI executable compatible with that Joomla release.
  • Permission to run Joomla’s CLI entry point in the installation’s CLI context.
  • The exact username of the account to reset.

Run the command

  1. Change to the Joomla installation’s CLI context.
  2. Run php joomla.php user:reset-password --username=<username>, replacing <username> with the confirmed account username. Joomla’s documentation illustrates the form with php joomla.php user:reset-password --username=cinderella.
  3. When prompted, enter the new password and provide it again if prompted for confirmation.
  4. Sign in at /administrator and verify that the account has the expected access.

CLI failure checks

  • If the shell says PHP is unavailable, use the server’s PHP CLI binary or have the host enable it; do not run the command through a web browser.
  • If Joomla reports that the command is not found, check that you are in the installation’s CLI context and that the file belongs to the site you intend to change.
  • If the username is rejected, return to the user list or database read-only view and copy the exact username, including capitalization where applicable.
  • Do not place the password itself in the command line. A prompt keeps it out of common process listings and shell history.

Secure the account after recovery

Password recovery restores authentication; it does not prove that the account or site was not compromised. Complete these actions while you still have an authorized session.

  • Create a unique, high-entropy password that is not used on another service.
  • Change the password again in Joomla if you used a database edit, a temporary configuration recovery, or any other emergency value.
  • Delete temporary recovery code or lines from configuration.php and restore its original permissions.
  • Review the user’s email address, enabled status, group assignments, and recent account changes for anything you did not authorize.
  • Remove temporary files, exported database copies, or notes containing credentials, and revoke short-lived server or database access granted for the recovery.
  • Ask your hosting provider or security administrator to review server and Joomla logs if the lockout was unexpected or repeated.

Troubleshoot by symptom

The reset form accepts the address but no email is delivered

Check the account address, spam and quarantine folders, and the site’s mail transport. If delivery cannot be restored, use a recovery method for which you have legitimate server, database, or terminal access.

The email arrives but the link or code fails

Use the newest message, avoid reusing an expired request, and complete the process in the same browser session where practical. If repeated fresh requests fail, stop generating codes and use an authorized alternative rather than exposing the code to another person.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The new password works, but the user has the wrong privileges

Password and authorization are separate. Inspect the account’s groups in Joomla and compare them with the role the user is supposed to hold. Do not grant Super User access merely because it makes sign-in easier.

A database reset still cannot authenticate

Recheck the Joomla version, the database and table prefix, the exact username, and the password format required by that release. Restore the backup if unrelated fields changed, then use Joomla’s CLI or file-based recovery instead of trying additional unverified hashes.

The site fails after editing configuration.php

Restore the pre-edit copy and its permissions, confirm the file belongs to the intended installation, and repeat the release-specific procedure carefully. A temporary recovery change must be removed once access is regained.

A practical decision checklist

  1. Can you receive mail at the account address? Use Forgot your Password?.
  2. Can a trusted Super User or Administrator sign in? Edit the account under Users / Manage.
  3. Do you control Joomla’s files but not email or the backend? Follow the current configuration.php recovery guide and remove its temporary change.
  4. Do you have PHP CLI and the exact username? Run Joomla’s user:reset-password command.
  5. Is MySQL your only route? Back up first, identify the installation prefix and account, follow the release-specific database instructions, and change the password again inside Joomla.

At every stage, use the least invasive option available, verify the account identity before changing it, and leave no temporary credential or recovery mechanism behind.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

JoomlaJoomla administratorJoomla CLIPassword resetphpMyAdminwebsite recovery

Leave a Reply

Your email address will not be published. Required fields are marked *

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.