Locked Out of WordPress Admin
Locked Out of WordPress Admin? Get Back In Safely
You can’t log in to your WordPress dashboard: the password reset email never arrives, your admin account disappeared, a former developer or agency kept the access, or the login page shows an error. Being locked out of WordPress admin is stressful, but access can usually be recovered if you control the hosting account or can prove you own it.
Locked out of WordPress admin: common situations
Password reset emails never arrive
“Unknown username” or your administrator account no longer exists
A former web designer or agency holds all the access
A security plugin or firewall is blocking your IP address
The login page loops, shows a critical error or a blank page
Unknown admin users appeared (possible hack)
What to do right now
- Check your spam folder for the reset email, and confirm which email address is on the account.
- Identify who controls the hosting and domain. Whoever controls the hosting can restore admin access. If it’s a former provider, request the credentials in writing.
- If you suspect a hack (unknown admins, redirects), don’t keep trying blindly; see our WordPress site hacked page.
- Gather proof of ownership: host name, registrar, invoices, the card or account used to pay.
What we do
- Restore administrator access through the hosting account, database or secure command-line tools
- Fix email delivery so password resets arrive
- Remove unknown or obsolete users and review roles
- Help you recover hosting or domain access from former providers, using your proof of ownership
- Set up two-factor authentication and a documented access list so it’s less likely to happen again
How long does it take?
With hosting access, admin access can often be restored the same day. If the hosting or domain is controlled by a third party, it depends on how fast that provider or registrar responds to your ownership request.

Tell us what you have access to. We’ll find the safest way back in.
Your questions, answered
If the domain and hosting are in your name or paid by you, contact the providers directly with proof of ownership. We help you with the process. If the domain itself is at risk, see expired domain name.
Often because the site sends mail without authentication, so it’s blocked or filtered. We set up authenticated SMTP.
Usually not safely. Hosting or domain control is the key to proving ownership.
Keep an owner-level account in your name, store credentials in a password manager, use two-factor authentication and keep a list of all providers.