How to Fix the Most Common WordPress Login Problems

How to Restore Access to Your WordPress Dashboard Safely

Getting locked out of your WordPress admin dashboard can feel alarming. You might see an endless login page refresh, an incorrect password error, or a blank white screen. Do not worry. Your website data, articles, and images are completely safe on your database and server. We can fix WordPress login problems systematically without losing any of your hard work.

In this guide, we will walk through a safest-first troubleshooting path. We start with the easiest, risk-free checks and move step-by-step to server-level fixes. By the end of this tutorial, you will know exactly how to isolate the cause of your login block, regain access, and secure your login page against future issues.

Prerequisites Before You Begin

Before we start editing files, we must make sure we have the right tools ready. Having these items prepared prevents accidental mistakes:

• Hosting Control Panel or FTP Access: You need a way to access your website files. You can use the File Manager inside your hosting control panel (like cPanel) or an FTP client like FileZilla.
• Database Access: You need access to phpMyAdmin through your hosting account if we need to reset your password directly in the database.
• A Fresh Backup: Even though these steps are safe, always copy your files or export your database before making changes. If your hosting provider has a "Create Backup" button, click it now.

Step 1: Clear Your Browser Cache and Cookies

Sometimes, the issue is not with your WordPress site at all. It is with your web browser. WordPress uses cookies to verify your identity when you try to log in. If your browser has stored old or corrupted cookie files, WordPress might reject your login attempt or keep refreshing the login page without showing an error.

How to Test and Fix This

1. Try Incognito Mode: Open a private or incognito window in your browser. Go to your login URL (usually example.com/wp-admin). Try logging in. If this works, your website is fine, and your local browser cache is the culprit.
2. Clear Browser Cookies: If incognito mode works, clear your main browser's history, cookies, and cache. In Google Chrome, you can do this by clicking the three dots in the top right, selecting Clear Browsing Data, choosing "Cookies and other site data", and clicking Clear data.
3. Restart Your Browser: Close all browser windows, open them again, and try logging in normally.

Step 2: Reset Your Password Safely

If you see an "Incorrect Password" error, your password might have been changed, or you might have forgotten it. Let us look at two ways to reset it safely.

Method A: Use the "Lost your password?" Link

This is the standard method. Click the Lost your password? link below the login form. Enter your username or email address, and click Get New Password. Check your inbox for the reset link.

The Limitation: Sometimes, WordPress fails to send emails because your server is not configured to use PHP mail correctly. If you do not receive the email within ten minutes, you must use Method B.

Method B: Reset Your Password via phpMyAdmin

If you cannot receive the reset email, you can change your password directly inside your database. This is highly secure and bypasses the email system entirely. Let us do this step by step:

1. Log in to your hosting account and open phpMyAdmin.
2. Select your WordPress database from the left-hand sidebar.
3. Look for the table named wp_users. Note that your database prefix might be different for security reasons (for example, wp56_users). Click on this table.
4. Find your admin username in the list and click Edit.
5. Look for the row named user_pass. In the Function column, select MD5 from the dropdown menu. WordPress uses MD5 hashing to encrypt passwords.
6. In the Value column, delete the existing scrambled text and type your new, strong password.
7. Click the Go button at the bottom of the page to save your changes.

Now, go back to your login page and enter your username and the new password you just typed. You should be able to log in successfully.

Step 3: Troubleshoot Plugin and Theme Conflicts

A poorly coded plugin update, a security plugin block, or a conflict between two active plugins can easily break your login page. This often results in a "WordPress login page refreshing" loop or a blank white screen.

How to Deactivate All Plugins Without Admin Access

Since you cannot log in to your dashboard to turn off plugins, we will do it using FTP or your hosting File Manager. This process does not delete your plugins or lose their settings.

1. Log in to your hosting File Manager or connect via FTP.
2. Navigate to the wp-content folder.
3. Find the folder named plugins. Right-click it and rename it to plugins_old.
4. Try logging in to your WordPress dashboard now.

How to Identify the Broken Plugin

If you successfully log in after renaming the folder, a plugin was definitely causing the problem. Let us find out which one it is:

1. Go back to your File Manager and rename plugins_old back to its original name: plugins.
2. Log in to your WordPress dashboard. Go to the Plugins page. You will see that all your plugins are now deactivated.
3. Activate your plugins one by one. After activating each plugin, log out and try to log back in, or refresh your dashboard.
4. When the login problem returns, the plugin you just activated is the culprit. Delete that plugin via FTP or replace it with an alternative.

If you suspect a theme conflict instead of a plugin, follow the same steps but navigate to wp-content/themes and rename your active theme's folder. WordPress will automatically fall back to a default theme like Twenty Twenty-Four, allowing you to log in.

Step 4: Fix URL and Redirect Settings

If you recently moved your site to a new domain, added an SSL certificate (HTTPS), or changed your site settings, you might experience a WordPress login redirect loop. This happens when your site's database URLs do not match the actual URL you are typing into your browser.

Define Your Site URLs in wp-config.php

We can force WordPress to use the correct URLs by adding two lines of code to your wp-config.php file. This file is located in the root directory of your WordPress installation.

1. Open your File Manager or FTP client and locate the wp-config.php file in your root folder.
2. Download a copy of this file to your computer as a backup.
3. Edit the file and scroll down to the line that says /* That's all, stop editing! Happy publishing. */.
4. Just above that line, paste the following code (replace example.com with your actual domain name):

define('WP_HOME', 'https://example.com');
define('WP_SITEURL', 'https://example.com');

Make sure you use https if your site has an active SSL certificate, or http if it does not. Also, check if your site uses the www prefix or not. The URL here must match your actual site setup exactly. Save the file and try to log in.

Step 5: Check and Reset Your .htaccess File

The .htaccess file is a powerful server configuration file used by Apache servers. If this file becomes corrupted by a security plugin or a server error, it can block access to your admin area or cause redirect loops.

How to Create a Clean .htaccess File

1. Open your File Manager or FTP client and go to your root WordPress folder (usually public_html).
2. Find the .htaccess file. If you cannot see it, make sure your File Manager is set to "Show Hidden Files" (dotfiles).
3. Rename this file to .htaccess_old. This disables the old rules safely.
4. Try logging in to your WordPress dashboard.
5. If you can log in, go to Settings > Permalinks in your dashboard and click Save Changes at the bottom of the page. This automatically generates a fresh, clean .htaccess file for you.

Summary of Common Login Issues and Solutions

To help you quickly decide which step to take, use this comparison table to match your symptoms with the correct solution:

Symptom	Likely Cause	Primary Solution
Page refreshes without any error message	Browser cookie or URL mismatch issue	Clear browser cookies or define URLs in wp-config.php
"Incorrect Password" error	Wrong credentials or database mismatch	Reset password via phpMyAdmin using MD5
"Too many redirects" or redirect loop	Corrupted .htaccess or wrong site URL settings	Rename .htaccess or update wp-config.php URLs
Blank white screen (White Screen of Death)	Plugin or theme conflict, or PHP memory limit	Rename the plugins folder via FTP to deactivate them

Common Mistakes to Avoid

• Editing Files Without Backups: Never edit files like wp-config.php or .htaccess without saving a copy of the original file first. If you make a syntax error, your entire website could go down.
• Forgetting MD5 Hashing in phpMyAdmin: If you change your password in the database but forget to select "MD5" from the function dropdown, WordPress will read your password as plain text and will not let you log in.
• Leaving the Plugins Folder Renamed: If you rename your plugins folder to plugins_old, do not leave it that way. Rename it back to plugins so you can reactivate your essential tools safely.

How to Verify Your Result

Once you have successfully logged back into your WordPress dashboard, you must verify that everything is working correctly and securely. Follow these verification steps:

1. Log Out and Log Back In: Do not just stay logged in. Log out completely, close your browser tab, open a new one, and log in again to make sure the fix is permanent.
2. Check Your Site Security: If a plugin conflict or a security lockout caused your issue, review your security settings. You can follow our guide on How to Secure a WordPress Site With a Simple Checklist to make sure your login page is secure without locking you out again.
3. Monitor Site Performance: Sometimes, heavy security plugins or caching issues cause login delays. You can monitor your site's real-world speed and performance using the Core Web Vitals report Core Web Vitals Report to ensure your login page and front-end load quickly for everyone. If your site is running slow, you can learn How to Speed Up WordPress Without Breaking Your Website to optimize your setup.

Next Actions

Now that you have regained access to your WordPress dashboard, take a moment to prevent this from happening again. Set up a reliable, automated backup plugin like UpdraftPlus so you can restore your site with one click if anything goes wrong. Keep your plugins and themes updated regularly, and avoid installing multiple security or caching plugins at the same time, as they often conflict with each other.

Frequently Asked Questions

Why does my WordPress login page keep refreshing without showing an error?

This issue is usually caused by a browser cookie conflict or incorrect site URL settings in your WordPress database. When your browser cookies do not match the session requirements of your site, the login page simply reloads. You can resolve this by clearing your browser cache and cookies, or by explicitly defining your website URLs in your wp-config.php file.

Will deactivating my plugins via FTP delete my website data or settings?

No, renaming your plugins folder via FTP or File Manager only temporarily disables the plugins. It does not delete any files, database settings, or configurations. Once you rename the folder back to its original name, all your plugin settings will remain exactly as they were before you deactivated them.

What should I do if I cannot find my .htaccess file in the File Manager?

The .htaccess file is a hidden file. In your hosting File Manager, look for a settings or preferences button (usually in the top-right corner) and check the box that says 'Show Hidden Files' or 'Show dotfiles'. If it still does not exist, you can create a new blank text file, name it '.htaccess', and save it in your root directory.