WordPress Login Not Working? How to Fix “Can’t Log In” Errors

If you cannot log in to WordPress, start by noting exactly what happens when you try. An error under the password box, a message saying you have tried too many times, a reset email that never arrives, or a blank screen after you log in each point to a different fix. Work through the steps below in order, starting with the easiest. Most people can get back in using the first or second option.

Step 1: Identify what is blocking you

Before you change anything, find the symptom that matches your situation.

Step 2: Reset your password by email

The “Lost your password?” link is the first thing to try. It sends a reset link to the email address saved on your user account.

How to request a reset

1. Go to yourdomain.com/wp-login.php?action=lostpassword. Replace yourdomain.com with your own domain name.
2. Enter your username or the email address you use for WordPress.
3. Click the button to send the link.
4. Open the email and click the reset link. Choose a new password and save it.

If you use WordPress.com rather than a site you host yourself, the address is wordpress.com/wp-login.php?action=lostpassword. If two-step verification is turned on, you may be sent a code by text message or email instead of a plain reset link.

If the email does not arrive

• Check your spam and junk folders. Search for the sender name or the word “password”.
• Wait about 15 minutes. Email can be slow, and sending a second request too soon may cause confusion.
• Check the saved email address. If the address on your user profile is an old one you no longer read, the email goes nowhere. Only advanced users, or your host’s support team, should check this in the database (see Step 3).
• Check your mail server. If you run email on the same domain, a fault there can stop reset emails. Our guide to email delivery failure and its common causes covers the usual problems.

If you are already logged in to another account

If you still have access as another administrator, you can change the password from inside the dashboard. Go to Users, then Your Profile, generate a new password and click Update Profile. This only helps if someone else on the site can log in.

Step 3: Reset the password from the command line or database

If the email route fails, you can set a new password directly. These methods are more technical. If you are not comfortable with them, ask your host’s support team to do it for you. Keep a backup before you change anything.

Option A: WP-CLI (requires SSH access)

WP-CLI is a command-line tool for WordPress. It needs SSH access, which some hosts provide through their control panel. It is the safer option because WordPress sets the password itself.

1. Log in to your site over SSH and move to your WordPress folder.
2. Find your username with: wp user list
3. Set a new password with: wp user update username --user_pass='new-password'

Replace username and new-password with your own details. Official WordPress documentation covers resetting passwords this way.

Option B: phpMyAdmin (advanced users)

phpMyAdmin is a web tool for managing the database that stores your site’s content and user accounts. Many hosting control panels include it.

1. Open phpMyAdmin from your hosting control panel.
2. Select the WordPress database. If you are not sure which one it is, check the DB_NAME line in the wp-config.php file.
3. Open the wp_users table. Your table prefix may be different from wp_.
4. Find your user row and click Edit.
5. In the user_pass field, choose the MD5 function from the dropdown and enter your new password.
6. Click Go to save.

After you log in, change the password again from your profile page. Setting a password through the database can cause problems with how WordPress stores passwords, so the profile page is the better long-term place to set it.

Step 4: Fix a lockout from a security plugin or host rule

A “too many attempts” message usually means a security plugin or a rule on your server has blocked your address. This protects the site from password-guessing attacks, but it can also lock out the real owner after a few mistyped passwords.

Check for a security plugin

If you can still reach the site’s files, look in the wp-content/plugins folder for security plugins that limit login attempts. To switch one off without the dashboard, rename its folder, for example from wordfence to wordfence-old. WordPress then deactivates it. Rename it back once you are in.

Check for a server-level block

Some hosts block IP addresses after repeated failed logins. If renaming the plugin does not help, contact your host’s support team and ask whether your address has been blocked. Give them the time you were locked out, not your password.

Stop it happening again

• Use a strong, unique password and store it in a password manager.
• Set a sensible limit on login attempts, so a few typing errors do not lock you out for hours.
• Add two-step verification where your plugin supports it.
• Read our guide to creating strong passwords for your small business.

Step 5: Fix a missing or blank login page

If /wp-admin or /wp-login.php shows a blank page, a 404 error or a page that is not your login form, a plugin is often changing the login address. Many security plugins let you set a custom login URL. If you forget it, you cannot reach the form.

1. Rename the security plugin’s folder in wp-content/plugins, as in Step 4.
2. Try yourdomain.com/wp-login.php again.
3. If the form loads, log in and check the plugin’s settings for the custom login address.

Step 6: Fix the white screen after you log in

A blank white screen after a correct login usually means a plugin or theme has crashed. WordPress cannot show the dashboard, so it shows nothing. The fix is to turn off the most recent change.

Check for Recovery Mode

Newer versions of WordPress may send you an email with a link to Recovery Mode when a plugin or theme causes a fatal error. Check your admin email inbox, including spam, for that message. Recovery Mode lets you log in and turn off the problem plugin. Behaviour can vary between versions, so check the current WordPress documentation if the steps differ.

Turn off plugins using FTP or your file manager

1. Connect to your site with an FTP client or your host’s file manager.
2. Go to wp-content.
3. Rename the plugins folder to plugins-old. This turns off all plugins at once.
4. Try logging in. If the dashboard loads, rename the folder back to plugins.
5. Go to Plugins and turn plugins back on one at a time, checking the site after each one, until the white screen returns.

Switch to a default theme

If the white screen appears on the front of your site as well as in the dashboard, the theme may be the cause. In the wp-content/themes folder, rename your active theme’s folder. WordPress then falls back to a default theme. You can then reinstall or update the theme.

Also check the PHP error log in your control panel. It often names the file and plugin that failed. Our guide on recovering WordPress admin access without a plugin covers more ways back in.

Step 7: Protect yourself before the next problem

• Keep a current backup. Your host or a backup plugin can save a copy of your files and database. Store at least one copy somewhere other than your site.
• Keep two administrator accounts. Use a second account for emergencies, with a different email address.
• Check your admin email address. Make sure you can read it, because password resets and Recovery Mode messages go there.
• Update with care. Test plugin and theme updates on a copy of the site first if you can. A staging site is a copy of your website used for testing. Read more about why a WordPress staging site helps.
• Limit plugins. Fewer plugins means fewer chances for a conflict. See how fewer plugins help keep WordPress secure.

Next steps

1. Note which symptom matches your situation in the table above.
2. Try the “Lost your password?” link and check spam for the reset email.
3. If that fails, ask your host’s support team for help with a password reset or a lockout, and give them the exact error message you see.
4. Once you are back in, create a backup, change your password and check your admin email address.

FAQ

Why does my WordPress reset email not arrive?

The most common reasons are that the email went to spam, the address saved on your account is out of date, or your mail system is not delivering messages. Check spam first, then wait about 15 minutes before requesting another link.

How do I log in if I am locked out by a security plugin?

Rename the plugin’s folder in the wp-content/plugins folder using FTP or your host’s file manager. This turns the plugin off, so you can log in. Rename the folder back afterwards and adjust the lockout settings.

Is it safe to reset my password in phpMyAdmin?

It can be done, but it is an advanced step. Take a backup first, use the correct database and table, and change the password again from your profile page after you log in. If you are unsure, ask your host’s support team.

What should I do if my site shows a white screen after login?

Check your email for a Recovery Mode link, then turn off plugins by renaming the plugins folder. If the problem goes away, turn plugins back on one at a time to find the cause.

Keep Reading

WordPressCan’t Login to WordPress? Recover Admin Access Without a PluginBloggingJoomla vs WordPress for a Small Business Blog: Which Fits You?WordPressWhy Are My WordPress Images Not Loading? 7 Common Fixes