How to Log In to WordPress (Step-by-Step Guide + Troubleshooting)
How to Log In to WordPress (Step-by-Step Guide + Troubleshooting)
Need to access your WordPress dashboard? Follow the standard wp-admin login steps, find your username or reset your password, and troubleshoot common errors, redirect loops, and two-factor authentication issues without risking your website.
To log in to a standard self-hosted WordPress website, open https://yourwebsite.com/wp-admin/, enter your WordPress username or email address and password, and select Log In. If you are not already signed in, WordPress normally sends you to its login screen automatically. You can also open https://yourwebsite.com/wp-login.php directly.
If that does not work, the next step depends on what you see. A wrong password, a missing login page, and a login screen that keeps refreshing are separate issues. This guide walks through the normal login process first, then shows you how to identify and troubleshoot common problems without risking your site’s settings.
Step 1: Find Your WordPress Login URL
Open a browser and type your website’s address followed by /wp-admin/:
https://yourwebsite.com/wp-admin/
Replace yourwebsite.com with your actual domain. For a standard WordPress installation at the domain root, this address opens the dashboard if you are already signed in, or redirects to the login screen if you are not. The direct login URL is:
https://yourwebsite.com/wp-login.php
These paths are documented in the WordPress developer guide to logging in. If WordPress was installed in a subdirectory, the path may be different, such as https://yourwebsite.com/blog/wp-admin/.
If neither address works, do not assume WordPress is broken. Some sites use a custom login address or a security service that restricts access. Check the welcome information from your hosting provider or the agency that manages the website. Avoid guessing at settings or disabling security plugins just to reach the login form.
Step 2: Enter Your Username and Password
On the standard WordPress login screen, you should see two fields:
- Username or Email Address: Enter the username or email associated with your WordPress user account.
- Password: Enter the password for that account. Check for accidental spaces and remember that passwords are case-sensitive.
- Remember Me: Leave this unchecked on a shared or public computer. On a personal device, choose it only if you are comfortable keeping the session active.
- Log In: Select the button to submit your credentials.
If your site requires two-factor authentication (2FA), finish the additional verification step when prompted. Depending on the security system, that may mean an authenticator code, a passkey, or another approved method. A successful password entry alone may not complete the login.
Do not confuse a WordPress administrator account with a customer account used for shopping or membership access. A site can have a separate customer login that does not provide access to the administrative dashboard.
Step 3: Confirm You Have Reached the Dashboard
After a successful login, WordPress generally opens the administrative area at /wp-admin/. The left-hand menu may include Posts, Media, Pages, Users, and Settings. Which options appear depends on your account’s permissions and the site’s plugins.
If you can see the dashboard but cannot edit a page or manage plugins, you may not have the required user role. WordPress gives different permissions to administrators, editors, authors, and other users. Ask the site administrator to confirm your access rather than trying to bypass it. The WordPress roles and capabilities documentation explains those differences.
New to the dashboard itself? Our guide to WordPress for non-techies covers the basic tools and concepts you’ll encounter after signing in.
How to Reset a Forgotten WordPress Password
If the login page loads but you cannot remember your password, use the recovery link instead of repeatedly guessing.
- Select Lost your password? below the login form.
- Enter the username or email address associated with the WordPress account.
- Select Get New Password and look for the recovery email.
- Open the reset link, choose a new, unique password, and return to the login screen.
This is WordPress’s standard password recovery process. If the message does not arrive, check spam and other filtered folders, confirm which email belongs to the account, and allow a few minutes for delivery. An incorrect account address or a site email-delivery problem may prevent the message from arriving.
If you no longer have access to the account’s email, ask an authorized site administrator or your hosting support team for help. They can check the appropriate recovery method after confirming that you own or are permitted to manage the account. Don’t follow an unfamiliar tutorial that asks you to edit the database before checking safer options.
For an expanded walkthrough, see our guide to resetting your WordPress password.
WordPress Login Problems and What to Check
Before making changes, note the exact error message and whether the problem affects one account or everyone. That distinction can save a lot of unnecessary troubleshooting.
| What you see | Likely area to investigate | Safe first step |
|---|---|---|
| “Incorrect password” or an unrecognized username | Credentials or the wrong user account | Check the account email, use password recovery, and avoid repeated guesses |
| The login page reloads after you select Log In | Browser cookies, login sessions, or site URL configuration | Try a private window or another browser; then contact the site administrator if it persists |
| “Cookies are blocked” | Browser cookie settings or site configuration | Allow cookies for the site and try again |
| A 404 or 403 error at the usual login URL | Custom login path or an access/security rule | Confirm the approved login address with the host or site administrator |
| “Too many redirects” | Conflicting HTTPS, URL, proxy, or caching settings | Stop retrying and ask the technical team to inspect the configuration |
| An authentication code is required but unavailable | Two-factor authentication or account recovery | Use an approved backup method or contact an authorized administrator |
WordPress documents cookie problems and redirect loops in its login troubleshooting guide. The important difference is between a browser-level test, which you can generally perform safely, and a configuration change, which should be handled by someone with the appropriate access and a backup.
The Password Is Correct, but You Still Cannot Log In
Try a private browsing window or a different browser. This helps determine whether an existing cookie or extension is interfering. If it works there, clear the affected site’s cookies in your regular browser and try again. If the issue affects every browser, capture the exact error and escalate it.
Do not clear all browser data or deactivate every WordPress plugin as your first move. Those actions can disrupt other sessions or site functions without establishing the cause.
The Site Uses a Custom Login Screen
Some hosts and security plugins replace or restrict the standard WordPress login URL. If /wp-admin/ or /wp-login.php does not lead where expected, use the administrator-provided link or an approved hosting login tool. Confirm the destination uses your legitimate domain and HTTPS before entering credentials.
The Dashboard Is Blank or Shows an Error
If login succeeds but the dashboard displays a white screen, a fatal error, or a server error, the problem may involve plugins, PHP, hosting, or an update. That is different from a bad password. Record the error and contact the website’s technical support team. Avoid making untested changes on a live business website.
WordPress.com Login Is Different From Self-Hosted WordPress
If your website is hosted on WordPress.com, you can sign in through your WordPress.com account. The login flow may offer an email link, social sign-in, a password, or an additional authentication step. You may then open the site’s WP Admin area from the WordPress.com dashboard.
A self-hosted WordPress website normally uses its own site login or a host-provided access method. Your WordPress.com username is not automatically a valid account on every independently hosted WordPress site. Follow the WordPress.com login instructions if you are using that service, rather than treating the two login systems as interchangeable.
Keep Your WordPress Login Secure
Once you can access the site, a few basic practices reduce avoidable login problems and security risks:
- Use a unique, strong password and store it in a reputable password manager.
- Enable two-factor authentication where your site’s security setup supports it, and keep backup codes somewhere secure.
- Give each team member a separate account with the permissions they actually need.
- Remove access when someone no longer works on the website.
- Use HTTPS and avoid entering credentials through unexpected email links or unfamiliar domains.
- Sign out on shared devices instead of relying on Remember Me.
For more about account protection, updates, and backups, see how to strengthen WordPress security. A secure login is one part of keeping the website protected, not the entire security plan.
When to Contact Your Hosting Provider or Website Support Team
If you cannot reach the login screen, password recovery emails never arrive, multiple team members are locked out, or the dashboard shows a server error, it is reasonable to ask for help. Send the support team the site’s domain, the approximate time the issue began, the steps you tried, and a screenshot of the error with private information hidden.
Never send your password or a one-time authentication code in a support ticket. A legitimate support process should be able to investigate access without asking you to share those secrets.
For most people, logging in to WordPress takes less than a minute once the correct address and user account are known. When it does not, troubleshooting in a consistent order is faster and safer than changing site settings at random.
