Can't log in to WordPress? Common causes and fixes
If you can't log in to WordPress, the most common causes are an incorrect password, blocked browser cookies, a URL or SSL mismatch, a corrupted .htaccess file, a plugin conflict, or your IP address being temporarily blocked after several failed attempts. This article explains how to identify the cause and fix it, including how to reset your WordPress password from your hosting control panel.
Check which problem you have
- Login page reloads or sends you back to the login screen: usually a cookie, cache, URL/SSL or plugin issue
- wp-admin shows a 404 "page not found" error: usually caused by a corrupted
.htaccessfile or incorrect folder permissions - You see a 403 "Forbidden" error: your IP address may have been blocked after repeated failed login attempts
- You forgot your username or password: use the built-in password reset, or reset it from your control panel
- You are logged in but missing menus or options: your user role may have changed
Fix a login loop or blank login page
1. Use the "Lost your password" link
- Go to
example.com/wp-login.php - Click Lost your password?
- Enter the username or email address linked to your WordPress account
- Check your inbox (and spam folder) for the reset link and set a new password
2. Clear cookies and cache
WordPress uses cookies to remember that you are logged in. If cookies are blocked, corrupted or out of date, the login page can keep reloading without letting you in.
- Clear cookies and cache for your site in your browser settings
- Try logging in from a private or incognito browser window
- Try a different browser or device
- Make sure first-party cookies are allowed for your domain
3. Check for a URL or SSL mismatch
If your site is set to load over https:// but part of the configuration still points to http://, this can cause a redirect loop. Confirm your site address under Settings > General in WordPress uses the correct protocol, or ask your developer to check this if you cannot access the dashboard.
4. Fix a corrupted .htaccess file
The .htaccess file controls how your server routes web addresses, including /wp-admin. If this file becomes corrupted, you may see a 404 error when trying to reach wp-admin, even though WordPress itself is installed correctly.
- Connect to your site using an FTP client or the File Manager in your control panel
- Go to the
public_htmlfolder (or your site's folder if it's in a subdirectory) - Rename the file
.htaccessto.htaccess_old - Try loading
example.com/wp-adminagain - If the site loads, go to Settings > Permalinks in WordPress and click Save Changes to generate a fresh
.htaccessfile
5. Check folder permissions
Incorrect folder permissions can also stop wp-admin from loading correctly.
- Connect using FTP or File Manager and go to
public_html - Set permissions for the
wp-admin,wp-contentandwp-includesfolders to 755, applying this recursively to subfolders - Clear your browser cache and try logging in again
6. Rule out a plugin or theme conflict
If you can access files via FTP or File Manager, temporarily rename the plugins folder inside wp-content to disable all plugins, then try logging in again. If this works, rename the folder back and disable plugins one at a time to find the one causing the conflict.
Reset your WordPress password from your control panel
If you don't receive the password reset email or no longer have access to that mailbox, you can reset your WordPress admin password directly from your hosting control panel. Check your welcome email or the client area to confirm whether your account uses cPanel or DirectAdmin.
cPanel: reset via Softaculous
- Log in to cPanel
- Open Softaculous Apps Installer and click the WordPress icon
- Click All Installations
- Click the edit (pencil) icon next to your site
- Scroll to the Admin Account section and enter a new password
- Click Save Installation Details
DirectAdmin: reset via Softaculous
- Log in to DirectAdmin
- Go to Extra Features > Softaculous Auto Installer
- Click All Installations
- Click the pencil icon next to your site to edit it
- In the Admin Account section, enter your username and a new password
- Click Save Installation Details
Reset via phpMyAdmin (database method)
Use this method only if Softaculous is not available, for example if WordPress was installed manually.
- In cPanel, go to Databases > phpMyAdmin (in DirectAdmin, go to Extra Features > phpMyAdmin and enter your database username and password)
- Click your WordPress database, then open the
wp_userstable - Click Edit next to the admin user's row
- In the user_pass field, enter a new password
- Set the function dropdown next to that field to MD5
- Click Go to save, then log in to WordPress with the new password
If your IP address has been blocked
Repeated failed login attempts can trigger our server security (Imunify360) to temporarily block your IP address, which may show as a 403 Forbidden error instead of a login page. Contact Hostking support via live chat or by opening a support ticket from the client area, and we can check whether your IP has been blocked and remove the block if needed.
If none of these steps resolve the issue, contact Hostking support via live chat or a support ticket from the client area so we can check your hosting account and WordPress installation directly.
