What Principle of least privilege means
If an account with limited access is compromised, the damage is limited too. On a website, that means editors are not admins and old vendor accounts are removed. Review access regularly, especially when staff or agencies change.
Why it matters for your website
When everyone has admin access, one stolen login or careless click can break or expose your whole site. Giving people only the access they need limits the damage if an account is compromised. It also makes it easier to see who changed what.
Example
A blog writer at a law firm gets an Author account in WordPress instead of Administrator. When her password is phished, the attacker can't install plugins or change site settings.
Tips
- Give writers and editors content roles, not administrator access.
- Review user accounts every few months and remove ones that aren't needed.
- Create separate accounts for contractors instead of sharing your own login.
Common mistakes
- Making every staff member and vendor an admin for convenience.
- Forgetting to remove access when employees or agencies stop working with you.
Questions about Principle of least privilege
What is Principle of least privilege?
Giving each person, app or system only the access it needs to do its job, and nothing more.
What WordPress role should a content writer have?
Usually Author or Contributor. Authors can publish their own posts, while Contributors can write but need an editor to publish.
How does least privilege apply to plugins and apps?
Give connected apps and API keys only the permissions they need, such as read-only access for reporting tools. That limits harm if a key is leaked.
