Last Updated: February 18, 2026
Getting locked out of your own WordPress site feels worse than it usually is. In most cases, it’s fixable. You just need to stay calm and work through it methodically.
The most common causes are:
- A plugin conflict
- A security plugin blocking your IP
- Too many failed login attempts
- A forgotten password
- A broken email system that won’t send the reset link
Very rarely, it’s something more serious. Start with the simple fixes first.
Step 1: Try the Obvious
Before diving into file managers and databases:
- Use the “Lost your password?” link
- Try a different browser or device
- Clear your browser cache
- Confirm you’re logging into the correct URL (
yourdomain.com/wp-admin)
If the password reset email doesn’t arrive, check spam. If nothing shows up, your site may not be sending email properly. That’s a separate issue.
Step 2: Force Deactivate All Plugins
If the login page is broken or showing a white screen, a plugin conflict is often the cause.
You can deactivate all plugins at once using FTP or your hosting File Manager.
- Log into your hosting control panel.
- Open File Manager or connect via FTP.
- Navigate to
wp-content. - Rename the
pluginsfolder to something likeplugins-old.
That instantly deactivates every plugin on the site.
Try logging in again.
If access is restored, the issue was almost certainly a plugin conflict. Rename the folder back to plugins, then reactivate plugins one at a time inside the dashboard until you find the one causing the problem.
Step 3: If You’re Being Blocked by a Security Plugin
Security plugins like Wordfence or Sucuri can block your IP address after too many failed login attempts.
If you suspect that’s happening:
- Try logging in from a different network (for example, your phone’s hotspot).
- Or temporarily deactivate the plugin using the same “rename the plugin folder” method above.
Once you regain access, adjust the lockout settings or whitelist your IP.
If you don’t know which plugin is blocking you, disabling all plugins is still the fastest way to regain entry.
Step 4: Manually Reset the Password via Database
If password resets are failing and you’re confident the issue isn’t a plugin, you can reset your password directly in the database.
- Open phpMyAdmin in your hosting panel.
- Select your WordPress database.
- Open the
wp_userstable (the prefix may be different). - Find your username.
- Edit the
user_passfield. - Change the function to
MD5. - Enter a new temporary password and save.
You can then log in and immediately change the password again inside WordPress.
This method bypasses email completely.
Step 5: Check for Bigger Problems
If none of the above works, the issue could be:
- Corrupted core files
- A PHP version mismatch
- File permission problems
- A compromised site
At that point, guessing can make things worse.
If you’re locked out and unsure what caused it, starting with Website Help is usually the fastest path back in. A quick diagnostic can identify whether it’s a plugin, server configuration, or something more serious.
Preventing Future Lockouts
Lockouts usually happen because something changed.
To reduce the chances:
- Use strong passwords and store them securely
- Enable two-factor authentication
- Keep plugins and WordPress updated
- Avoid installing unnecessary plugins
- Maintain daily off-site backups
For business sites, it also helps to have documented recovery procedures and secure credential storage. If your site generates leads or revenue, being locked out for hours is more than an inconvenience.
That’s one reason WordPress Care Plans include monitored updates, credential management protocols, and emergency access procedures. When something goes wrong, you’re not starting from zero.
The Simple Answer
Most WordPress lockouts are caused by plugins or login protection rules.
Rename the plugins folder.
Reset your password if needed.
Work methodically.
If you’re not comfortable editing files or databases, get help quickly. The fix is usually simple. Waiting and guessing is what turns it into a bigger problem.
Stop Stressing Over WordPress
Whether you’re dealing with a slow site, security scares, or broken updates, you don’t have to fix it alone.
Let’s talk about a care plan that keeps your site running perfectly 24/7.