A client messages me: “I typed the right password, the page reloads, and I am back on the login screen.” Or the login page itself shows an error, or wp-admin just spins. When your WordPress login not working problem locks you out of your own site, it feels serious, but the posts and pages are almost always fine. Something between the browser, the login page and the database has gone wrong, and it can be traced step by step.
I am a WordPress developer in Surat and I get these lockout calls from clients in India and abroad, usually after a migration, a plugin update or a security change. Below is the order I check things in, the fixes that work most often, and what I do so the client does not get locked out again.
WordPress login not working: the common causes I see
When a client tells me their WordPress login not working issue started out of nowhere, it is nearly always one of these:
- A wrong password or username, often saved wrongly in the browser’s password manager
- Old cookies or a cached login page that sends you back to wp-login.php in a loop
- The site URL in Settings or in the database does not match the address you are using (http vs https, www vs non-www)
- A security, captcha or redirect plugin blocking the login or your IP address
- A plugin or theme conflict that breaks wp-admin after you log in
- The password reset email never arriving because the site cannot send mail
Knowing the symptom helps a lot. A login loop points to cookies, caching or site URLs. An “incorrect password” message points to the account itself. A blank or broken dashboard after login points to a plugin or theme.
Quick checks I do first
- Try a private window or a different browser, and type the password by hand instead of using autofill
- Check that you are opening the right address, such as https://www.yoursite.com/wp-admin/ and not an old staging or http link
- Use “Lost your password?” on the login page and check spam for the reset email
- Ask if anything changed recently: a migration, an SSL install, a new security plugin or an update
- Make sure there is a recent backup of the files and the database before touching anything
If the private window works, the WordPress login not working problem is in the browser, not in WordPress itself. In that case clearing cookies and cache for that one site usually brings the login back.
How I fix a WordPress login not working, step by step
I start with the simplest cause and test the login after each change, so I know exactly which fix solved the WordPress login not working issue.
WordPress uses cookies to remember that you are logged in. If an old cookie is stuck, or a caching plugin is serving a cached copy of the login page, you will keep landing back on wp-login.php. I clear cookies for the domain in the browser, then purge the caching plugin and any server or CDN cache. Login and wp-admin pages should always be excluded from caching.
2. Check the site address
After a move to https or a new domain, the WordPress Address and Site Address can still point to the old URL. When they do not match, the login cookie is set for one address and the browser asks for another, which creates a loop. If I cannot reach Settings, I set the correct URLs with WP_HOME and WP_SITEURL in wp-config.php, following the wp-config.php guide on WordPress.org. I explain the same loop problem in more detail in my post on the WordPress redirect loop.
3. Disable plugins without wp-admin
Security, captcha, login redirect and two-factor plugins are the usual suspects. If I cannot get into the dashboard, I open the hosting file manager or FTP and rename the wp-content/plugins folder to plugins-off. That turns off every plugin at once. If the WordPress login not working problem disappears, I rename the folder back and turn plugins on one at a time to find the one causing it. My plugin conflict guide shows how I narrow it down without breaking the live site.
4. Reset the password from the database
When the reset email does not arrive and the password is truly lost, I open phpMyAdmin from the hosting panel, find the admin user in the wp_users table, and set a new user_pass value using the MD5 function. WordPress upgrades it to a stronger hash on the next login. The official WordPress password reset guide covers this and a few other methods. I always confirm the account email is correct while I am there.
5. Switch to a default theme
If the login works but wp-admin breaks or goes blank straight after, the theme’s functions.php may be the problem. I rename the active theme folder so WordPress falls back to a default theme. If you see a full white page instead, my post on the WordPress white screen of death walks through that fix.
6. Check the server side
If none of the above helps, I check the PHP error log, file permissions on wp-login.php and wp-admin, and any firewall rules on the hosting account. Some hosts block logins from certain countries or after too many attempts, and support can lift that in a few minutes.
How I stop the WordPress login not working problem coming back
Once the client is back in, I spend a few minutes on prevention so the same lockout does not happen next month:
- Use one correct site URL everywhere, with https and a single www or non-www version
- Exclude wp-login.php and wp-admin from every cache layer
- Keep only one security or captcha plugin, and save its whitelist settings
- Set up working email with SMTP so password resets actually arrive
- Add a second admin account for the owner, with a strong password stored in a password manager
- Test plugin updates on a staging site before running them on the live site
The WordPress hardening guide is a good reference for keeping the login secure without locking yourself out.
When to ask for help
Most lockouts are fixed within an hour once you know where to look. If you have tried the steps above and your WordPress login is still not working, or you do not want to edit files and the database yourself, I can take a look. You can see what I do on my Fix WordPress Errors page, or contact me with your site address and what you see on the login screen.