21+ years in hosting · Jaipur, India · INR billing with 18% GST · 24/7 email support
Blog · WebJi® India

WordPress Login Not Working

Quick answer

WordPress login usually fails because of a stale cookie, a wrong password, a security plugin lockout, or a site URL that no longer matches the browser address. Try a private window at /wp-login.php first. If the password is right and you still bounce back, rename the lockout plugin or fix siteurl and home before resetting the password.

For WordPress site owners locked out of wp-admin who need the quickest safe fix for their exact login symptom.

✓ In business since 2005
✓ INR + GST billing
✓ 24/7 Email Support — avg reply < 60 min
GuideWebJi®
knowledge
Read time
5 min
Sections
6
Updated
14 Nov 2026
Written by
WebJi® team

Which WordPress login failure do you have?

What the screen shows decides the fix: a wrong-password message, a form that reloads, a lockout notice, a bounce back to the form, a blank page and a 404 each have different causes. Identify yours before touching the database.

WordPress login symptoms and the first thing to try
What you seeLikely causeDo this first
"The password you entered … is incorrect"Wrong password or usernameLost your password on /wp-login.php
"Cookies are blocked or not supported"Browser or cache blocking the test cookiePrivate window; allow cookies for the site
"Too many failed attempts" or login disabledSecurity plugin lockoutRename that plugin folder in File Manager
Correct password, back at the formURL mismatch, redirect loop, proxy HTTPSCheck siteurl, home and .htaccess
Blank page or "critical error"PHP fatal in a plugin or themeRename the plugins folder
/wp-login.php returns 404Login URL changed by a plugin, or wrong hosting accountDisable the hide-login plugin; confirm the files are here
Logged in, but "Sorry, you are not allowed"Your role was changedAnother admin restores Administrator role, or use WP-CLI

What to try in the browser before changing any files

Open https://your-domain/wp-login.php in a private window and sign in; if that works, the problem is cookies or cache in your normal browser, not the site.

  • Clear cookies and cached files for this site only, then sign in again.
  • Type the address yourself rather than using an old bookmark that may point to http:// or a different host.
  • If the form says the password is wrong, use Lost your password and check spam for the email.
  • If you use a page cache or CDN, make sure /wp-login.php and /wp-admin/ are excluded from caching; see clearing the WordPress cache.

How to clear a security plugin lockout or 2FA block

Rename the lockout plugin's folder in wp-content/plugins; WordPress deactivates it, the lockout disappears and you can sign in. This works for limit-login, firewall, hide-login and two-factor plugins alike.

  1. Open cPanel → File Manager, then public_html/wp-content/plugins.
  2. Rename the plugin folder, e.g. limit-login-attempts-reloaded → limit-login-attempts-reloaded-off.
  3. Reload /wp-login.php and sign in.
  4. Rename the folder back, reactivate it, remove your IP from its lockout list, and keep the protection on.

If you cannot tell which plugin is responsible, rename the whole plugins folder, sign in, rename it back and reactivate plugins one at a time. A code prompt after the right password is two-factor authentication; use a recovery code, or disable the 2FA plugin this way and set it up again, as covered in WordPress two-factor authentication. File Manager steps for plugins are in managing plugins from cPanel.

Why a correct password sends you back to the login page

WordPress accepted the password but then redirected the browser to a different address, so the login cookie does not match; the cause is almost always siteurl/home, a redirect rule or HTTPS behind a proxy.

  • Site URLs: the siteurl and home rows in the _options table must match the address you use exactly, including https and www. If WP_HOME and WP_SITEURL are set in wp-config.php, those win. Ways to fix them are in changing the WordPress site URL.
  • .htaccess loop: rename .htaccess to .htaccess-off and try again; if it works, re-save Settings → Permalinks to write a clean file.
  • Cloudflare "Flexible" SSL or a proxy: the proxy talks to the server over HTTP while WordPress expects HTTPS, causing a loop. Switch Cloudflare SSL to Full (strict) with a certificate on the server, or, behind a trusted proxy, add if ( isset( $_SERVER['HTTP_X_FORWARDED_PROTO'] ) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https' ) { $_SERVER['HTTPS'] = 'on'; } near the top of wp-config.php.

What if the login page is blank or shows a critical error?

A blank login page means PHP stopped with a fatal error before the form was drawn, usually after a plugin or theme update. Rename wp-content/plugins to plugins-off; if the form returns, a plugin is at fault.

If it stays blank with plugins off, rename the active theme's folder in wp-content/themes so WordPress falls back to a default Twenty-series theme, which must still be installed. To see the actual error, enable the debug log as explained in checking WordPress error logs, and for a site-wide blank page use fixing the WordPress white screen.

Resetting the WordPress password with WP-CLI or phpMyAdmin

When the reset email never arrives, set a new password directly: WP-CLI is the cleanest way, and phpMyAdmin works without SSH. Back up the database first.

# list administrators, then set a new password
wp user list --role=administrator --fields=ID,user_login,user_email
wp user update 1 --user_pass='use-a-long-unique-passphrase'

# restore a lost Administrator role
wp user set-role 1 administrator
  1. Without SSH, open cPanel → phpMyAdmin, select the site's database and the table ending in _users.
  2. Click Edit on your user, type a new password in user_pass, choose MD5 in the Function column and click Go.
  3. Sign in at /wp-login.php. WordPress accepts the old-style hash once and replaces it with a modern one; since WordPress 6.8 new hashes use bcrypt.
  4. Change the password again from Users → Profile, so the stored value is one you never typed into phpMyAdmin.

If your username is not in that table, you are in the wrong database or prefix; check DB_NAME and $table_prefix in wp-config.php. A strong password can come from the password generator.

Getting help from WebJi® support

On WebJi® WordPress hosting, email support@webji.services with the domain, what the login screen shows and what you have already tried; support replies 24/7 in Hindi and English, on average within 60 minutes. Phone support on +91 141 4941811 is available during business hours. WebJi® does not store your WordPress password, so support resets access through the same file and database steps shown above, and any larger repair is quoted before work starts.

FAQ

Frequently asked questions

Why did WordPress stop sending password reset emails?

The server's PHP mail() messages are often rejected or filtered as spam because they fail SPF and DKIM. Configure an SMTP plugin that sends through a real mailbox on your domain, then test the reset again. Meanwhile, use WP-CLI or phpMyAdmin to get in.

I changed the login URL with a plugin and forgot it. How do I find it?

Rename that plugin's folder in wp-content/plugins; the default /wp-login.php returns immediately. After signing in, reactivate the plugin and note the custom slug. The trade-offs of hiding the login page are in changing the WordPress login URL.

Can a full disk stop WordPress logins?

Yes. When the account's disk or inode quota is full, PHP cannot write session data or the database cannot write, and logins fail silently or with errors. Check disk usage in the hosting panel and delete old backups or logs before trying again.

Is it safe to keep a limit-login plugin after a lockout?

Yes, and you should. Add your own IP to its allowlist if it has one, and pair it with two-factor authentication. Settings for retry limits are covered in limiting login attempts in WordPress.

Checked 15 November 2026 against WordPress and WP-CLI documentation · Reviewed by the WebJi® team, Jaipur.

WebJi® since 2005

Ready to get started with WebJi®?

Join 12,000+ businesses across India and overseas. INR pricing, 18% GST shown before payment and 24/7 email support in Hindi and English — average first reply under 60 minutes.