Quick answer
The fastest way to regain WordPress account access is via the lost password link on the login page. If the email doesn't arrive or you don't have access to it, you can reset the password directly in the database via phpMyAdmin or create a new administrator via FTP. Always back up the database before any changes.
How to recognize the problem
- Message "Error: The password you entered for the username is incorrect"
- Password reset link doesn't arrive in email
- Login succeeds but the site immediately returns you to the login form
- No access to the email the account is registered with
- Site moved to a new domain or server and login doesn't work
Most common causes
Incorrect username or password
The most common cause is a typo or wrong username. Passwords are case-sensitive, and login accepts both username and email, so check exactly what you entered.
Email not arriving due to sending issues
If the site doesn't send emails reliably, the password reset message won't arrive. Also check your spam folder.
No access to the registered email
If the account is linked to an address you no longer have access to, resetting via email isn't possible. In that case, the password is changed in the database.
Corrupted file or plugin blocking login
An error in a theme or plugin, or a faulty `.htaccess`, can terminate the session right after login. This often appears as being returned to the login form.
Domain or site address change
After moving a site, the addresses in the `wp_options` table may point to the old domain, so login cookies don't work.
Step-by-step fix
- 1
Try the Lost Password option
Open
/wp-login.phpon your site and click the lost password link. Enter your username or email and check your inbox, including the spam folder. The reset link is valid for a limited time, so use it immediately. - 2
Check the exact username
If you don't know the username, open the
wp_userstable in the database and look at theuser_logincolumn. In phpMyAdmin this is visible without changes, and if you don't have database access, ask the person who set up the site. - 3
Make a backup before changes
Before any database or file changes, export the database via phpMyAdmin (
Export) and copy the files via FTP or the hosting control panel. Without a backup you risk permanent data loss. - 4
Reset the password in the database
In phpMyAdmin, open the
wp_userstable, find your row and click Edit. In theuser_passfield, delete the existing value, select theMD5function from the dropdown and enter a new password, then save. Then log in with the new password and change it immediately in your profile. - 5
Create a new administrator via FTP
If database changes aren't possible, create a temporary PHP file in the site root that includes
wp-load.php, creates a user with thewp_create_userfunction and assigns it the administrator role viawp_update_useror theset_role('administrator')method on aWP_Userobject. Run the file once via a browser, then delete it immediately. This step is risky and only do it if you have a database backup. - 6
Disable plugins and theme if login fails
Via FTP, temporarily rename individual plugin folders or the entire
wp-content/pluginsfolder toplugins-offand try to log in. If successful, restore the name and disable plugins one by one. If needed, temporarily rename the active theme folder insidewp-content/themes, then restore it if the site doesn't work. - 7
Check site addresses in the database
In the
wp_optionstable, findsiteurlandhomeand make sure they point to the correct domain, withhttpsif applicable. After moving a site, the old address often remains, which breaks login. - 8
Clear cookies and try another browser
Clear cookies for your domain in the browser or open a private window. Sometimes an outdated login cookie causes the problem, not the account itself.
If nothing helps
If you can't access either the database or FTP, contact the hosting administrator and ask for control panel access. Also check if the site is in maintenance mode or blocked at the server level, as this is sometimes displayed as a failed login. Once you regain access, immediately change the password, enable two-factor authentication if available and check the list of users with administrator role. Remove unknown accounts and review recent file changes, as a failed login can also be the result of a site breach.
How to prevent it
- Keep your password in a reliable password manager and don't share the administrator account
- Regularly back up the database and site files
- Make sure the site sends emails reliably, including password reset messages
- Enable two-factor authentication and limit the number of login attempts
When to call a professional
Call IT support if you don't have database or FTP access, if the site appears infected, or if after several attempts you can't restore administrator access without risking your data.
Website development · Fast, SEO-ready, multilingual websitesFAQ
Why am I not receiving the password reset email?
Most often because the site doesn't send mail reliably or the message ended up in spam. Also check if the address on the account is correct, and if not, reset the password in the database.
Can I restore access without database and FTP access?
Without access to the database or site files, you can't reset the password yourself. Contact the hosting administrator or the person who maintains the site to give you control panel access.
Is it safe to change the password in the database?
Yes, if you make a database backup beforehand and only change the `user_pass` field for your account. After logging in, immediately change the password through your WordPress profile.