You want to quickly edit some text, but you can't remember where to log in, or your password is being rejected even though you're sure it's correct. You log in to your WordPress website via jouwdomein.nl/wp-admin or jouwdomein.nl/wp-login.php, using the username or email address and password for your WordPress account. Below, you'll find instructions on what to do if that doesn't work—from a forgotten password to a login screen that keeps redirecting you.
Where to Log In to WordPress
The login URL for every WordPress site is your domain name followed by /wp-admin behind it, and that takes you to the actual login file wp-login.php. Both addresses will take you to the same screen, which has a field for your username or email address and a field for your password. If WordPress is in a subfolder, that folder name will be included, for example jouwdomein.nl/blog/wp-admin. Check Remember me On your own computer, leave it checked so you stay logged in longer. On a shared computer, leave it unchecked. My tip is to bookmark the login page and save your login information in a password manager. That prevents many of the login questions we get.
See you at /wp-admin If you see a 404 page, the login page has likely been moved using a security plugin such as WPS Hide Login. Web developers do this to reduce bot traffic. Ask the person who built your site for the updated address, or check your email for the handover message. A common misunderstanding I often see is the difference between your WordPress account and your hosting account. With your customer account on my.surver.nl You use cPanel to manage your package, files, and email. You use your WordPress account to manage the site's content. These are two separate logins, each with its own password. If you'd like to learn more about what WordPress is and how it works, read What is WordPress, and what is it used for?.
Forgot your password
You can recover a forgotten WordPress password using the link Forgot your password? below the login form, after which WordPress will send a recovery link to your email address.
- Click the link and enter your username or email address.
- Open the email and click on the recovery link. It's only valid for a limited time, so do it right away.
- Choose a new password—preferably one generated by a password manager—and log in again.
If you don't receive the email, check your spam folder first. If it's not there either, your site is probably not sending emails properly. This is a common WordPress issue that has nothing to do with your account, and in WordPress emails aren't arriving You can read how to fix that. If there's another administrator, have them reset your password via Users > All Users. If you're using SSH, WP-CLI is the fastest way to do it. With WP user list find the correct ID and use wp user update ID --user_pass=newpassword Set a new password outside of your email. What I don't recommend is changing passwords on your own in phpMyAdmin using some random tutorial. One wrong click in the wrong table, and you’ll end up causing more problems than you solve. It’s better to ask support to take a look. Then choose a unique password. You can find out how to keep track of it easily in password managers and secure passwords.
Your information is correct, but you can't log in
If you can't log in with the correct credentials, it's usually due to cookies, cache, an incorrect website address, or a plugin—not your password. The most common symptom is the login loop. You fill in all the fields, the page reloads, and you’re back on the login screen. This is often because your browser isn’t saving the login cookie. Clear the cookies for your domain or try using an incognito window. If that helps but the problem keeps happening, a plugin or the server may be caching the login page. To find out how to rule that out, read Clearing the Cache in WordPress.
The second thing I check is the site address. Do the values match Settings > General If the address is no longer the actual one—for example, after switching to https or removing www—WordPress will keep redirecting you to an address where your cookie isn't valid. Instructions on how to fix this, even without the dashboard, can be found in Change the WordPress URL. A security or 2FA plugin can also lock you out. Temporarily disable it by going to the folder in wp-content/plugins to rename it. If you suddenly see a CAPTCHA page, it means you’ve entered the wrong password too many times. On Surver shared hosting, this happens after more than ten failed login attempts, including on wp-admin. Fill in the CAPTCHA and then try logging in again. If you see a blank screen or a critical error message after logging in, it’s not a login issue but a PHP error in a plugin or theme. WordPress will often send an email with a link to recovery mode, which lets you log in anyway and deactivate the plugin.
You're logged in, but you can't see the menus
After logging in, are you missing features such as Plugins or Settings, then your account has a role other than administrator. WordPress uses user roles. An administrator can do anything, an editor manages all content, an author can only manage their own posts, and a subscriber can do virtually nothing. Only an administrator can change your role. If you’re working with a web developer, it’s quite common for you to be an editor and the developer to be an administrator, so you don’t accidentally mess with the technical settings. If you want to become an administrator yourself, be sure to agree on who will handle the updates. Having two administrators who both assume the other is handling it is one of the ways a site can fall into neglect without anyone noticing. If you want to know where everything is located, read The WordPress Dashboard: A Tour.
Now that you're logged in, it's time to get your access settings in order. Enable two-factor authentication for all administrators, use a unique password, and delete accounts for people who no longer work on the site. Learn more about this in Securing Your WordPress Login. If you see an administrator you don't recognize, treat it as a potential hack and follow My WordPress website was hacked—what should I do now?. At Surver, we ensure that a large portion of login attacks are blocked right at the server level, using a ModSecurity firewall, Bot Blocker, and automatic IP blocking. This is included in all our shared hosting plans, including our Managed WordPress Hosting. Choose your WordPress maintenance, in which case Business Login Protection—which includes 2FA and an activity log—will be added.
Frequently Asked Questions
Can I log in with my email address instead of my username?
Yes, WordPress accepts both your username and your account's email address in the login field. This feature has been available since WordPress 4.5. If you can't remember your username, using your email address is often the quickest way to log in, and your password remains the same.
Why am I constantly getting logged out?
Usually, your browser deletes the cookies when you close it, or you have Remember me not checked. If this happens while you're working, it may be caused by a caching plugin or a security plugin with a short session duration. Also check whether the site address at Settings > General matches what's in your address bar, including www and https.
I'm the only administrator, and my old email address no longer works. How do I log in?
In that case, you won't be able to receive the recovery email, and you'll need to change the password on the server side, for example, using WP-CLI. Surver shared hosting includes SSH and WP-CLI in every plan. If you’d rather not use those tools, ask support to help you, and then immediately add an email address to your profile that you actually use.
