Editing Encyclopedia:Administrators (section)

=== Security ===
{{shortcut|WP:SECUREADMIN}}
{{main|Wikipedia:User account security}}
Wikipedia's [[Wikipedia:Password strength requirements|policy on password strength requirements]] requires administrators to have [[Password strength|strong passwords]] and [[Wikipedia:Personal security practices|follow appropriate personal security practices]]. Because they have the potential to cause site-wide damage with a single edit, a compromised admin account will be blocked and its privileges removed on grounds of site security. In certain circumstances, the revocation of privileges may be permanent. Any administrator who is discovered to have a password less than 8 bytes in length or among the [[Wikipedia:10,000 most common passwords|10,000 most common passwords]] may also be desysopped. Discretion on resysopping temporarily desysopped administrators is left to [[WP:ARBCOM|the Arbitration Committee]], who will consider whether the rightful owner has been correctly identified, and their view on the incident and the management and security (including likely future security) of the account.

[[WP:2FA|Two-factor authentication]] is available to further secure accounts from unauthorized use.

Administrators must '''never''' share their password or account with any other person, for any reason. If they find out their password has been compromised, or their account has been otherwise compromised (even by an editor or individual they know and trust), they should attempt to change it immediately, or otherwise report it to a bureaucrat for temporary desysopping. Users who fail to report unauthorized use of their account will be desysopped. Unauthorized use is considered 'controversial circumstances', and access will not be automatically restored.