This guide walks you through how to log in to WordPress using the default login URL, custom login pages, and alternative methods. You’ll also learn how to recover access if you’re locked out.
Key Takeaways
- Default login URL: Most WordPress sites use /wp-login.php or /wp-admin to access the dashboard.
- Custom login pages: Plugins or themes may change the login URL for security—check your site settings.
- Username and password: Use the credentials created during setup or provided by your site admin.
- Password recovery: Use the “Lost your password?” link if you forget your login details.
- Browser and cache issues: Clear cookies or try incognito mode if login fails unexpectedly.
- Two-factor authentication: Some sites require extra security steps—have your phone or app ready.
- Contact your host: If all else fails, your hosting provider can help restore access.
How to Log in to WordPress: A Complete Step-by-Step Guide
Logging into your WordPress website is the first step to managing content, updating themes, installing plugins, or customizing your site. Whether you’re a blogger, business owner, or developer, knowing how to log in to WordPress is essential. This guide will walk you through every method—from the standard login process to troubleshooting common issues. By the end, you’ll be able to access your dashboard confidently, no matter the situation.
Understanding the WordPress Login Page
WordPress uses a secure login system to protect your site from unauthorized access. The login page is where you enter your username (or email) and password to enter the admin dashboard—also known as the WordPress backend. This is where all site management happens.

Visual guide about How to Log in WordPress
Image source: miraiyotch.com
Most WordPress installations follow a predictable pattern for login URLs, but some may be customized for security. Knowing the standard paths and alternatives will help you log in quickly.
Method 1: Using the Default WordPress Login URL
The easiest and most common way to log in is through the default login page. Here’s how:
Step 1: Open Your Website in a Browser
Launch your preferred web browser (Chrome, Firefox, Safari, etc.) and go to your website’s homepage. For example, if your site is example.com, type that into the address bar.
Step 2: Add /wp-login.php to the URL
In the address bar, add /wp-login.php to the end of your domain. So, it becomes:
https://example.com/wp-login.php
Press Enter. This will take you directly to the WordPress login screen.
Step 3: Enter Your Login Credentials
On the login page, you’ll see two fields:
- Username or Email Address: Type the username or email you used when creating your account.
- Password: Enter your password. Make sure Caps Lock is off.
Step 4: Click “Log In”
After filling in both fields, click the blue Log In button. If your credentials are correct, you’ll be redirected to the WordPress dashboard.
Alternative Default URL: /wp-admin
You can also try adding /wp-admin to your domain:
https://example.com/wp-admin
This URL usually redirects to the login page if you’re not already logged in. It’s a handy shortcut for quick access.
Method 2: Logging in Through a Custom Login Page
Many WordPress sites use security plugins like WPS Hide Login or iThemes Security to change the default login URL. This helps prevent brute-force attacks by hiding the login page from hackers.
How to Find a Custom Login URL
If your site uses a custom login page, the standard /wp-login.php won’t work. Here’s what to do:
- Check with your developer or admin: They may have set a unique login path like
/loginor/my-account. - Look for login links: Some themes add a “Login” link in the footer or header menu.
- Use a plugin dashboard: If you installed a login customization plugin, check its settings under Plugins > Installed Plugins.
Example: Logging in via a Custom URL
Suppose your custom login URL is https://example.com/member-login. Simply visit that page and enter your credentials as usual.
💡 Pro Tip: Bookmark your custom login page to save time in the future.
Method 3: Logging in via the WordPress Mobile App
WordPress offers free mobile apps for iOS and Android that let you manage your site on the go. You can log in using the same credentials as your desktop site.
Steps to Log in via the App
- Download the WordPress app from the App Store or Google Play.
- Open the app and tap “Log In.”
- Enter your site’s URL (e.g., example.com).
- Input your username and password.
- Tap “Log In” to access your dashboard.
The app provides a simplified version of the admin panel, perfect for quick updates, replying to comments, or checking site stats.
What to Do If You Forgot Your Password
Forgetting your password is common—WordPress makes it easy to reset.
Step 1: Go to the Login Page
Visit your login URL (e.g., https://example.com/wp-login.php).
Step 2: Click “Lost your password?”
Below the login form, click the Lost your password? link. This will take you to the password reset page.
Step 3: Enter Your Username or Email
Type the username or email address associated with your account. WordPress will send a password reset link to your email.
Step 4: Check Your Email
Open your email inbox and look for a message from your WordPress site. Click the reset link inside.
Step 5: Create a New Password
You’ll be taken to a page where you can enter a new password. Choose something strong and unique. Click “Reset Password” to save it.
💡 Tip: Use a password manager to store your login details securely.
Troubleshooting Common Login Issues
Sometimes, logging in doesn’t go as planned. Here are solutions to the most frequent problems.
Issue 1: “Invalid Username or Password” Error
This means your credentials are incorrect. Double-check:
- Spelling of your username or email
- Password case sensitivity
- Whether you’re using the right account (some sites have multiple users)
If unsure, use the password reset option.
Issue 2: Login Page Keeps Refreshing
This often happens due to browser cache or cookies. Try:
- Clearing your browser cache and cookies
- Using incognito or private browsing mode
- Switching to a different browser
Issue 3: “Error Establishing Database Connection”
This isn’t a login issue—it means your site can’t connect to the database. Contact your hosting provider immediately. They can check server status and database settings.
Issue 4: Locked Out After Too Many Failed Attempts
Security plugins may temporarily block your IP after multiple failed logins. Wait 15–30 minutes, or ask your host to unblock you.
Issue 5: Two-Factor Authentication (2FA) Required
If your site uses 2FA, you’ll need a code from an app like Google Authenticator or Authy. Make sure your phone is nearby. If you lost access, contact your admin for backup codes.
How to Secure Your WordPress Login
Once you’re in, take steps to protect your account:
- Use strong passwords: Combine letters, numbers, and symbols.
- Enable two-factor authentication: Adds an extra layer of security.
- Limit login attempts: Install a plugin to block brute-force attacks.
- Change the login URL: Use a plugin like WPS Hide Login to hide /wp-admin.
- Update regularly: Keep WordPress, themes, and plugins up to date to patch security flaws.
For example, if you’re using a custom theme, make sure it’s compatible with security best practices. You can learn more about what is a child theme in WordPress to safely modify your site without breaking core files.
When to Contact Your Hosting Provider
If you’ve tried everything and still can’t log in, your hosting company can help. They can:
- Reset your password directly in the database
- Restore a backup if your site was hacked
- Check server logs for errors
Most hosts offer 24/7 support via chat or ticket. Have your account details ready when you contact them.
Conclusion
Logging into WordPress is simple once you know the right steps. Whether you use the default URL, a custom login page, or the mobile app, accessing your dashboard is the key to managing your site effectively. Remember to keep your credentials secure, use strong passwords, and enable extra security features like 2FA.
If you run into trouble, don’t panic—most login issues have quick fixes. And if you’re customizing your site, consider using a child theme to avoid conflicts during updates. With this guide, you’re now equipped to log in to WordPress confidently, anytime.