WordPress Login Not Working: Diagnose Cookies, URLs and Authentication

If your WordPress login is not working, the problem may be as simple as an incorrect password or browser cookie — or it may involve redirects, plugins, HTTPS settings, caching, or your site’s URL configuration.

You may be unable to open wp-admin, get sent back to the login page after entering the correct password, or see a “too many redirects” message.

The best approach is to identify exactly what happens when you try to log in and then work through the likely causes in order.

QUICK ANSWER

If WordPress login is not working, first verify your login URL and password. Then clear site cookies and browser cache, test an incognito window, check for a login redirect loop, verify WordPress and Site Address settings, and temporarily disable plugins if necessary. Also check HTTPS, caching, and security rules if wp-admin remains inaccessible.

What Does “WordPress Login Not Working” Look Like?

WordPress login problems do not always look the same.

You may experience one of these symptoms:

The correct password is rejected
The login page keeps refreshing
You log in but are immediately sent back to wp-login.php
wp-admin redirects to the homepage
The browser reports “Too many redirects”
WordPress says cookies are blocked or unsupported
The login page shows a blank page or server error
Password-reset emails never arrive

Because these symptoms can have different causes, avoid changing several settings at the same time.

Make one change, test the login again, and keep track of what changes the behavior.

1. Check the WordPress Login URL and Credentials

Start with the simplest possibility.

The standard WordPress login page is usually:

https://yourdomain.com/wp-login.php

You can also normally visit:

https://yourdomain.com/wp-admin/

If you are logged out, WordPress should redirect you to the login page.

Check that:

You are using the correct website
The username or email address is correct
The password is entered exactly
Caps Lock is not accidentally enabled
Your password manager is not filling an old password

TIP:

If you recently changed your WordPress password, manually type the new password once instead of relying on an automatically saved browser password.

2. Reset Your WordPress Password

If WordPress says the password is incorrect, use the built-in password reset before changing server files or database settings.

On the login page, click:

Lost your password?

Enter your WordPress username or administrator email address.

WordPress should send a password-reset link to the email associated with the account.

If the reset message does not arrive:

Check the spam or junk folder
Confirm you are checking the correct administrator email
Wait a few minutes and try once more
Check whether your WordPress site is having email-delivery problems

If WordPress emails are not being delivered, see our WordPress Not Sending Email guide.

SECURITY WARNING:

Do not use a weak temporary password on a live website. Use a unique, strong password and update your password manager after the reset succeeds.

3. Clear WordPress Cookies and Browser Cache

WordPress uses browser cookies to manage authentication.

If a login cookie is corrupted, expired, or associated with an old domain or HTTPS configuration, you may enter the correct credentials but still be returned to the login page.

Try these steps:

Close the WordPress login tab.
Clear cookies for your website.
Clear browser cache.
Open a new browser window.
Visit /wp-login.php again.
Enter your credentials manually.

You can also test the login in a private or incognito window.

If login works in incognito mode but fails in your normal browser, the problem is likely related to stored cookies, cache, or a browser extension.

4. Fix a WordPress Login Redirect Loop

A common WordPress login problem occurs when you enter valid credentials but are redirected back to the login page.

This can happen when WordPress cannot use the authentication cookie correctly or when the site’s URL settings do not match the URL you are using.

Check for differences such as:

http://example.com
https://example.com

or:

https://example.com
https://www.example.com

If WordPress thinks the site uses one address while your browser is using another, authentication and redirect behavior can break.

If you can still access the dashboard, go to:

Settings → General

Check:

WordPress Address (URL)
Site Address (URL)

They should match the site’s actual configuration.

If You Cannot Access wp-admin

Experienced users can temporarily define the expected site URLs in wp-config.php while troubleshooting:

define( 'WP_HOME', 'https://example.com' );
define( 'WP_SITEURL', 'https://example.com' );

Replace example.com with the exact address your site should use.

IMPORTANT:

Do not copy URL values blindly. Confirm whether your site uses www or non-www and whether HTTPS is active before editing wp-config.php.

5. Check HTTPS, Proxy, and Redirect Settings

If the login problem began after enabling SSL, changing domains, moving hosts, or adding a CDN or proxy, inspect your redirect configuration.

Common problems include:

WordPress using HTTP while the public site uses HTTPS
Conflicting redirects between WordPress and the hosting server
A CDN forcing HTTPS while the origin server redirects back to HTTP
Both a plugin and the server handling the same redirect
Incorrect proxy configuration

A typical symptom is:

ERR_TOO_MANY_REDIRECTS

or a login page that continuously reloads.

Check your:

WordPress site URLs
Hosting redirect settings
SSL plugin settings
Cloudflare or CDN SSL mode
Apache or Nginx redirects

Avoid adding more redirects until you know which layer is already handling HTTPS.

6. Temporarily Disable WordPress Plugins

A security, login, caching, membership, redirect, or authentication plugin can interfere with WordPress login.

If the problem started immediately after installing or updating a plugin, investigate that plugin first.

If you cannot access wp-admin, use your hosting File Manager, SFTP, or FTP.

Open:

/wp-content/

Rename:

plugins

to:

plugins-disabled

Then try logging in again.

If login starts working, rename the folder back to:

plugins

Then disable or rename individual plugin folders until you identify the cause.

LIKELY PLUGIN TYPES:

Security, login customization, two-factor authentication, caching, redirect, membership, and SSL plugins deserve extra attention when the problem specifically affects wp-admin login.

7. Check Caching and Security Rules

A badly configured cache can serve an old login page or interfere with authentication cookies.

Check:

WordPress caching plugins
Hosting-level page cache
CDN cache rules
Reverse proxy cache

Make sure wp-login.php and authenticated admin sessions are not being cached incorrectly.

Also review:

Security plugins
Web application firewall rules
Login-attempt protection
IP blocking
Country blocking
Two-factor authentication

If a security tool has locked you out, use its documented recovery process rather than repeatedly trying passwords.

8. Check the Exact Error If wp-admin Still Will Not Open

If the login page itself returns a server error, blank page, or WordPress fatal error, the problem may no longer be an authentication issue.

For example:

HTTP 500 can indicate a server, PHP, plugin, theme, or configuration problem.
Critical Error can indicate a fatal PHP error.
404 can indicate a URL or rewrite problem.

If the login page displays an HTTP 500 error, see our WordPress 500 Internal Server Error guide.

If WordPress displays a critical error message, see our WordPress Critical Error guide.

Check your hosting error log at the exact time the login fails.

Look for:

PHP fatal errors
Plugin filenames
Permission errors
Memory exhaustion
Security-rule blocks

If the problem is server-side and you cannot access the site’s files or database, contact your hosting provider with the exact URL and error time.

Fastest WordPress Login Troubleshooting Order

If you need the shortest practical sequence, use this order:

Confirm you are using the correct login URL.
Type the username and password manually.
Reset the password if necessary.
Clear site cookies and browser cache.
Test in an incognito window.
Check for a login redirect loop.
Verify WordPress and Site Address URLs.
Check HTTPS and CDN redirects.
Temporarily disable plugins.
Clear server and CDN caches.
Check security rules.
Read the server error log if wp-admin still fails.

WordPress Login Quick Checklist

☐ Correct /wp-login.php URL
☐ Correct username or email
☐ Correct password
☐ Password manager not using old credentials
☐ Cookies cleared
☐ Browser cache cleared
☐ Incognito login tested
☐ WordPress Address checked
☐ Site Address checked
☐ HTTPS configuration checked
☐ Plugin conflict tested
☐ Login page excluded from inappropriate caching
☐ Security/WAF blocks checked
☐ Server error log reviewed

Frequently Asked Questions

Why does WordPress keep sending me back to the login page?

A login redirect loop can be caused by corrupted authentication cookies, incorrect WordPress site URLs, HTTP/HTTPS mismatches, plugins, caching, or redirect configuration problems.

Why can’t I log in to wp-admin even with the correct password?

The password may be correct while WordPress is unable to maintain the login session. Clear the site’s cookies, test an incognito window, and check your WordPress URL and HTTPS configuration.

Can a plugin stop me from logging into WordPress?

Yes. Security, login, redirect, caching, membership, SSL, and authentication plugins can interfere with the login process. Temporarily disabling plugins is a useful diagnostic test when wp-admin is inaccessible.

Why does WordPress say cookies are blocked?

WordPress requires cookies for authentication. Browser restrictions, stale cookies, incorrect cookie-domain settings, HTTPS inconsistencies, plugins, or caching can prevent the required authentication cookies from working correctly.

Why does wp-admin redirect to the homepage?

This can happen because of a plugin, custom redirect rule, incorrect WordPress URL settings, authentication-cookie failure, security configuration, or a proxy/CDN redirect.

What should I do if the WordPress login page shows error 500?

Treat that as a server-side error rather than a normal password problem. Check your PHP/server logs and troubleshoot plugins, themes, .htaccess, PHP, and hosting configuration.

Final Thoughts

When WordPress login is not working, do not immediately reinstall WordPress or start deleting files.

First determine whether the problem is the password, authentication cookie, redirect behavior, site URL, HTTPS configuration, plugin, cache, or security layer.

Start with the simple browser and password checks, then move gradually toward WordPress configuration and server-level troubleshooting.

A methodical approach is much safer than changing multiple login, SSL, and redirect settings at the same time.