What is Edit Author Slug plugin?
Edit Author Slug is a WordPress plugin that solves a specific but important problem: by default, WordPress uses a user login username in author archive URLs. An author page URL like yoursite.com/author/john means that anyone who knows the author archive URL also knows a valid WordPress login username, which makes brute force login attacks easier to execute.
Edit Author Slug lets you change the author URL slug to any custom value independent of the login username. You can set each user a public-facing slug that does not reveal the login username. You can also change the /author/ base in the URL to something else entirely.
The plugin is a lightweight security measure most commonly recommended alongside login page protection and two-factor authentication as part of a broader WordPress security setup.
Need Help With Edit Author Slug Setup, Troubleshooting, or Customization?
Need help with Edit Author Slug? Whether you are dealing with errors, broken functionality, styling problems, plugin conflicts, or advanced customization, we can help you fix the issue and get the plugin working properly on your WordPress site.
Get Edit Author Slug Expert HelpKey Features
- Change author URL slug independently of login username
- Change the author URL base from /author/ to a custom value
- Per-user slug control
- Bulk slug update for multiple users
- Redirects old author URLs to new slugs automatically
Pros & Cons
Pros
- Removes login username from publicly accessible URLs
- Simple single-purpose plugin with no unnecessary features
- Free with no premium version
Cons
- Only addresses one specific security vector -- not a complete security solution
- Changing author slugs may affect existing backlinks and bookmarks
Free vs Premium
Edit Author Slug is completely free with no premium version. All features are included at no cost.
Common Problems & Fixes
After changing the author slug, my author archive page is returning a 404 error.
After changing any author slug, go to Settings, then Permalinks, and click Save Changes without changing anything. This flushes the WordPress rewrite rules and registers the new author slug correctly. If 404 errors persist after flushing permalinks, check that the old author slug redirect is enabled in the plugin settings. Also verify that no caching plugin is serving a cached 404 response — clear all caches after making slug changes.
The author slug change is not saving or keeps reverting to the username.
Edit Author Slug adds a field to the user profile screen at Users, then Profile. Ensure you are saving the profile after changing the slug. If the slug reverts, check whether another plugin is resetting user meta on profile save — some user management plugins overwrite profile fields. Also ensure the slug field is not empty when saving, as an empty slug may cause the plugin to fall back to the default username-based slug.
I changed the author base from /author/ to something else and now all author pages are broken.
After changing the author base in Edit Author Slug settings, always flush the WordPress rewrite rules by visiting Settings, then Permalinks, and clicking Save Changes. If pages are still broken, deactivate and reactivate the plugin then flush permalinks again. Some hosting environments cache rewrite rules at the server level — contact your host to clear server-level rewrites if WordPress-level flushing does not resolve it.
Customization & Developer Notes
How do I change my author URL to not reveal my username?
Go to Users, then your Profile, and scroll down to the Author Slug section added by the plugin. Enter a custom slug — this can be your display name, a pseudonym, or any URL-safe string. Save the profile. Then go to Settings, then Permalinks, and click Save Changes to flush rewrite rules. Your author archive will now be accessible at yoursite.com/author/your-custom-slug rather than yoursite.com/author/your-login-username.
Can I change /author/ in the URL to something different like /writers/?
Yes. In Edit Author Slug settings, find the Author Base option and enter your preferred base. Changing it to writers would make all author URLs follow the pattern yoursite.com/writers/username. After saving, flush permalinks. This is useful if you want the URL structure to match your site terminology or if you want to further obscure the fact that the archive uses the WordPress author system.
Frequently Asked Questions
Why does it matter if my WordPress username appears in author URLs?
If your login username is exposed in the author URL, anyone attempting a brute force login attack already has one half of the credential — they only need to guess the password. Using Edit Author Slug to set a public slug different from your login username means that observing the public site does not reveal any valid login credential. This is one layer in a broader login security approach that should also include strong passwords, two-factor authentication, and limiting login attempts.
Does changing the author slug affect SEO?
Changing the author slug changes the author archive URL. If your author archive pages have existing backlinks or are indexed, the old URLs will return 404 unless redirects are in place. Edit Author Slug automatically creates redirects from old author slugs to new ones, which preserves link equity. If you are changing the author base from /author/ to something else, check whether your old author URLs have any backlinks worth preserving before making the change.
Does this plugin work for sites with multiple authors?
Yes. Edit Author Slug adds the slug control to every user profile. Each user can have an independent author slug set by an administrator. For sites with many users, the plugin includes a bulk update option that sets all author slugs to match each user display name at once, which is a faster starting point than updating each profile individually.
Is Edit Author Slug necessary if I have disabled author archive pages?
If you have disabled author archive pages entirely — through your SEO plugin or by redirecting them — then the username exposure risk through author URLs no longer applies. However, some themes and plugins output author links in post metadata even when archives are disabled. If your site outputs any author URL anywhere on the front end, the username exposure exists. Use browser developer tools to check if any author URLs appear in your page source.