How to Fix WordPress Login and Admin Errors

You type your password, hit enter, and the login form loads again as if nothing happened. Or you get in and the dashboard is a blank white page. Either way, you can’t do anything with your site until you’re back in, and it’s easy to start guessing. Most of these problems come from a short list of causes, though, and you can work through them in order without making things worse.

Login trouble is common partly because WordPress is so widely used. W3Techs, which tracks how the web is built, put WordPress on about 40% of all websites in October 2026. That’s down from a peak of 43.6% in January 2025, but it still makes WordPress the most common content management system by a wide margin.

WordPress also dominates among sites that use a known CMS. Of those, roughly 59% run WordPress, far ahead of the next platforms.

Those two numbers can look contradictory, but they measure different things. The 40% figure counts every website on the internet. The 59% figure only counts sites where a CMS can be identified, which leaves out hand-coded and custom-built sites.

Whichever number you look at, a large share of the web depends on WordPress, which is why login and admin problems are worth understanding well.

Start by Reading the Error

Before you change anything, read what the screen actually says. “Incorrect password” is usually exactly what it sounds like. “Too many failed login attempts” points to a security plugin or your host blocking your address. A white screen or a message reading “There has been a critical error on this website” usually means a plugin or theme has crashed.

Copy the exact wording down. It helps when you search for a fix, and it’s the first thing your host’s support team will ask for.

Rule Out the Simple Problems

Most lockouts begin with a typo. Check that Caps Lock is off, and if you’re unsure what you typed, paste the password into a plain text field to see it. If you use a password manager, confirm it’s filling in the right site and not an older saved entry.

Then confirm the address. Most sites use yourdomain.com/wp-admin or yourdomain.com/wp-login.php. If you recently installed a security plugin, it may have changed the login path, so the default address will no longer work.

If the password really is correct and you still can’t get in, reset it. Use the “Lost your password?” link on the login page. If the reset email never arrives, reset the password through your hosting control panel or phpMyAdmin instead. Reset emails often fail on newer sites because of mail configuration, so don’t assume one is on its way.

Clear Cookies and Cache

WordPress keeps your login in cookies. If those cookies are stale, or they conflict with a recent change, the login page can reload endlessly. Clear the cookies for your site, or open a private window and try again. If that works, the problem was in your browser, and clearing it fixes the issue.

If you run a caching plugin or your host runs a server-side cache, clear that too. A cached login page can keep showing an old version even after the real problem is fixed.

Turn Off Plugins Without the Dashboard

When you can’t reach the dashboard, you can’t deactivate plugins from it. Use your host’s file manager or an FTP client, open wp-content/plugins, and rename the folder to something like plugins_old. WordPress will deactivate every plugin at once. If you can log in now, rename the folder back and turn plugins on one at a time. The last one you enabled before the problem returned is almost certainly the cause.

Security plugins, caching tools, and page builders cause most of these conflicts, especially right after an update.

Try a Default Theme

If the plugins weren’t the problem, try the theme. Rename your active theme’s folder inside wp-content/themes. WordPress will fall back to a default theme such as Twenty Twenty-Four. A broken theme can cause white screens and admin errors even when the login form loads normally, so this test is worth doing.

Check Your .htaccess File

The .htaccess file tells Apache how to handle requests. A bad rule in it can cause redirect loops or 500 errors on the login page. Download a copy through FTP or your file manager as a backup, then rename the original. When you save permalinks from the dashboard later, WordPress will generate a fresh file.

This only applies to Apache servers. Nginx keeps these rules in its server configuration, so you’ll need to look there instead.

Fix Redirect Loops by Setting the Site URL

If the login page keeps sending you back to itself, the site address in your settings is often wrong. This happens a lot after a migration. You can set the correct address in wp-config.php by adding these two lines above the “stop editing” comment:

define('WP_HOME', 'https://yourdomain.com');
define('WP_SITEURL', 'https://yourdomain.com');

Use your real domain, and make sure it matches your choice of www and HTTPS exactly. Even a small mismatch can send you around in circles.

Check the Database Connection

A “database connection error” means WordPress can’t reach its database. Compare the database name, username, password, and host in wp-config.php against what your hosting panel shows. If they match and the error continues, the database server may be down, so check with your host. If the credentials are wrong, reset the database user’s password in the panel and update the file to match.

If you think someone got into your site, replace the security keys and salts in wp-config.php as well. That logs out every user and invalidates existing sessions. You can generate new values from the official WordPress.org secret-key service.

Raise the Memory Limit for Blank Pages

A blank admin screen often means PHP ran out of memory partway through loading a page. You can raise the limit by adding this line to wp-config.php:

define('WP_MEMORY_LIMIT', '256M');

Some hosts cap PHP memory below what you requested. If your change doesn’t take effect, ask your host to raise the limit or check whether your plan allows it.

Choose Where to Start

If you’re not sure where to begin, match your symptom to the likely cause. A wrong password you know is correct usually points to stale cookies or a plugin that changed the login form. A reloading login page points to the site URL or a redirect rule. A white admin screen usually means a plugin, a theme, or the memory limit. A database connection error means the credentials or the server. A “too many attempts” message is a lockout, and the fix is either waiting it out or allowing your IP through your security plugin or host.

Prevent the Next Lockout

Once you’re back in, set yourself up so this doesn’t happen again. Keep a recent backup you can restore quickly. Test updates on a staging copy when you can, since a plugin update that works on one site may break another. Use a reputable security plugin to limit login attempts, but check that it won’t lock out your own address. Create a second administrator account in case the first one has trouble, and store your hosting and database login details somewhere safe.

Most WordPress login problems can be fixed in under an hour once you know where to look. Change one thing at a time, test after each change, and you’ll usually find the cause before you reach the end of the list.

---