WordPress · Practical guide

Can’t log in to WordPress wp-admin?

Troubleshoot a forgotten password, redirect loop, blocked login, or WordPress dashboard that will not load.

Quick answer

Troubleshoot a forgotten password, redirect loop, blocked login, or WordPress dashboard that will not load.

Start with the checks below. Each step explains what to look for and what to try next.

Confirm the correct login URL

Try yourdomain.com/wp-admin/ on the correct domain, and confirm the address is using HTTPS. A redirect to another domain may indicate incorrect WordPress Address or Site Address settings.

Choose the recovery that fits

Choose the recovery that fits

Password forgotten

Use the site’s legitimate password-reset process and check the associated mailbox.

Login returns to the same form

Check the URL, cookies and HTTPS redirects.

Login shows 403 or a security block

Review applicable security controls, then contact the administrator.

Site shows a white screen or 500 error

Investigate the application error before attempting more password resets.

Before you continue: Do not share WordPress passwords or reset links in public support messages.

Reset access safely

  1. Use the “Lost your password?” link on the WordPress login page.
  2. Check spam and your mailbox configuration if the reset email does not arrive.
  3. If email recovery fails, use a supported management tool or ask your hosting support for the safest recovery path.

If the login loops or shows an error

Clear the site-specific browser cookies, test a private window and temporarily disable a recently added security plugin using an approved recovery method. A 403 response can indicate a firewall rule; a 500 response may indicate a PHP or plugin issue.

Protect the account

After regaining access, use a unique password, update WordPress and plugins, and enable multi-factor authentication where your setup supports it.

How to confirm the issue is resolved

  1. Repeat the original action that produced the issue.
  2. Check the result in a second browser or network when relevant.
  3. Review logs or status messages for remaining errors.
  4. Keep a short record of what changed so it can be reversed if necessary.

If the issue persists, contact support with the exact error, time, affected domain and actions already tried—never include passwords or secret keys.

Guidance may vary by plan, control panel version and enabled features. Review the settings available to your account before changing live services.