WordPress Administrative Access Policy
Protecting Your Website
At Idaho Websites, security is one of the most important services we provide. Our managed hosting and maintenance plans are built around carefully controlling administrative access to your WordPress website. Every additional administrator account increases the potential risk of security vulnerabilities, whether through compromised passwords, outdated software, third-party plugins, or accidental configuration changes.
For this reason, we have established the following policy regarding user access.
Content Editors
We are happy to create Editor accounts for members of your team at no additional charge.
Editor accounts can:
- Create and edit pages and posts
- Upload media
- Manage blog content
- Update text and images
- Publish content
Editor accounts cannot:
- Install or remove plugins
- Modify website settings
- Change themes
- Create or remove administrator accounts
- Access sensitive configuration areas
For the vast majority of businesses, an Editor account provides everything needed to manage website content while maintaining the security of the website.
Administrator Access
If you require full Administrator access, we are happy to provide it. However, granting Administrator permissions changes our ability to guarantee the integrity and security of the website.
Once an external Administrator account has been created or provided access:
- Idaho Websites can no longer guarantee the security or stability of the website.
- Any changes made by third-party administrators may affect website functionality, performance, backups, SEO, or security.
- Security incidents resulting from administrator actions, compromised credentials, plugin installations, configuration changes, or other administrative activity are outside the scope of our managed hosting and maintenance services.
Security Cleanup
If a website with external Administrator access experiences a security incident, malware infection, website compromise, or other issue requiring investigation or remediation, all cleanup and recovery work will be billed at our current rate of $125 per hour.
This may include:
- Malware removal
- Security investigations
- Restoring backups
- Repairing website functionality
- Plugin or theme conflict resolution
- Database repair
- Website hardening
- Communication with hosting providers or third-party vendors
Our Recommendation
We strongly recommend limiting full Administrator access whenever possible. If someone only needs to update website content, an Editor account is almost always the appropriate level of access.
Our goal is not to restrict your control over your website, but to protect your investment and minimize unnecessary security risks.
If you have questions about which level of access is appropriate, we’re always happy to help.
Please note: Idaho Websites reserves the right to remove or disable external Administrator accounts if we determine they pose an immediate security risk to the website. We will make every reasonable effort to contact you before taking such action unless immediate intervention is necessary to protect the website, server, or other hosted clients.
