I have a client with a Wordpress website currently hosted on Siteground. They are worried that someone else has access to their Wordpress admin user account (only one user I can see in the back end) and also possibly their Siteground account.
I wanted to suggest just change passwords for both of these sites but wanted to confirm, would this be enough? Or create a new full admin account in Wordpress then delete the other altogether?
Is there a guaranteed way to remove any possible access to everyone but the client?