A failed WordPress login can be a password issue, a blocked account, a redirect loop, or a broader application error.
What to check
- Confirm the correct login address
- Use a safe password reset path
- Check whether the whole site or only admin is affected
What the results mean
Check whether the public site still works and use a safe reset path. Avoid disabling security controls before identifying the reason for the block.
Determine whether access or the site failed
Check the correct login URL and whether the public site still loads. Record the exact message and avoid repeated password attempts that might trigger a security lock. Use an account-controlled password reset where available, and inspect security, plugin, or server logs if the page loops or shows an error.
Recover safely
Preserve the database and user information before changing authentication or plugins. Restore access through a trusted account path, then review active administrators and security events. Test editing and saving a small change. If access was lost after an update, resolve the conflict rather than leaving protections disabled.
Can I just create a new admin account?
Only after confirming account ownership and the reason access failed. Unexplained administrators can also be a sign of compromise.
