If you cannot log in to WordPress admin, the cause may be a wrong password, a blocked request, a redirect loop or a plugin error. Identify the exact symptom before resetting credentials or changing security settings. If the public website is also unavailable, use the WordPress website not loading guide to check the broader outage first.
If wp-login.php loads and rejects a password, use the normal reset flow with the verified account email. If the page is blank, blocked or redirects repeatedly, changing the password is unlikely to help. Record the URL, error, time and recent changes. Test another browser only to rule out a local cookie issue.
Confirm the correct username or email and whether the reset message arrives. A missing email may indicate mail delivery trouble rather than an invalid account. Avoid repeated attempts when a security plugin limits logins. An authorised administrator can review the account and use an approved recovery method.
A firewall, host protection or login plugin can block an IP, region or custom login route. Review its event log and see whether other administrators are affected. Temporarily disabling all protection without finding the cause can expose the site; prefer a narrow correction or an authorised recovery process.
If login appears to succeed but returns to the same form, inspect the URL and cookie behaviour. Compare WordPress Address and Site Address, HTTP and HTTPS, and proxy rules. A migration can leave mismatched settings. Keep a backup and record the old values before editing them. Test the final login URL in a private browser window.
If a plugin update caused a fatal error, WordPress recovery mode or hosting file access can isolate the component. If the failure started immediately after an update, follow our WordPress update broke my site troubleshooting guide for the full recovery sequence. Avoid editing the database blindly. Once access returns, test the dashboard, public pages, forms and any OTP flow. Restore the security rules that protect the login.
Related: WordPress access support and white-screen troubleshooting.
The official WordPress login guide explains the normal sign-in and password-recovery path. Confirm the genuine site address before entering credentials. If a custom login URL or a security rule prevents access, ask the site owner or hosting administrator to verify it rather than guessing at bypasses. Keep passwords, recovery links and authentication codes out of screenshots and public support forums.