iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Antihost offers managed WordPress hosting with free migration, one-click staging and a 14-day free trial.
If you are locked out of WordPress admin, start with the least invasive remedy: check the administrator inbox for a WordPress Recovery Mode link, then try Lost your password?. If email recovery fails, reset the account with WP-CLI or the database, disable a plugin that is blocking login, and inspect wp-config.php for changed keys or site URLs. Back up the database and files before making database or configuration changes.
The correct fix depends on the symptom. A fatal PHP error calls for Recovery Mode; a rejected password calls for a reset; a broken login caused by a plugin calls for deactivation; and redirect or cookie problems often point to configuration or URL values.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Quickly identify why you are locked out of WordPress admin
Use the visible symptom to choose the safest first action. Do not begin by editing the database unless the simpler paths have failed.
| What you see | Most likely category | Start here | Access needed |
|---|---|---|---|
| A WordPress error page or a blank page after a plugin or theme change | Fatal PHP error | WordPress Recovery Mode email | Administrator email inbox |
| Your username is accepted but the password is rejected | Forgotten, changed, or overwritten password | Lost your password? | Account email, or server/database access if mail fails |
| The login form reloads, crashes, or stopped working after installing a plugin | Plugin or theme conflict | Deactivate the suspect plugin; if necessary, disable all plugins | WP-CLI, FTP, or a hosting file manager |
| You are redirected to the wrong domain, stuck in a loop, or logged out immediately | Incorrect site URL, cookies, security plugin, or changed configuration | Check the canonical URL and plugin blocks | File, database, or hosting-panel access |
| Your IP is denied or a security challenge repeats | Security plugin blocklist or host firewall | Remove the block through the plugin, database, or host | Another network, hosting panel, or server access |
Match the remedy to the access you still have
Your remaining access determines which recovery path is practical. Email access is enough for Recovery Mode or a normal password reset. SSH access lets you use WP-CLI without relying on the web login or outgoing mail. FTP, SFTP, or a host file manager lets you rename the plugins directory. Database access through a hosting panel can reset a user, but it carries the greatest risk of damaging unrelated records. If you have none of these, ask the host to restore access or inspect logs rather than guessing at database values.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
Work down the list in that order. Each step should have a clear stopping point: once a private-window test confirms that /wp-admin works, stop changing components and document what fixed it.
Before changing anything: protect the site
- Make a copy of the database and the WordPress files. Database edits and
wp-config.phpchanges have the highest recovery risk. - Record the exact error, URL, time, and the last plugin, theme, user, or setting change. This makes the eventual fix easier to verify.
- Use a separate browser window or private window for recovery. Existing cookies can preserve a failed login state.
- If you have several administrators, ask another trusted administrator whether the site is generally reachable. This distinguishes an account problem from a site-wide failure.
- Do not apply several fixes at once. If you reset a password, rename a plugin directory, and alter URLs together, you will not know which change solved the problem or created a new one.
- Keep an untouched copy of every file before editing it. Label backups with the time and the action you are about to take so a host can roll back the correct version.
Use the WordPress Recovery Mode email link
WordPress Recovery Mode was introduced in version 5.2. It is designed for fatal PHP errors and can let you enter the dashboard without editing files or using FTP.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsHow Recovery Mode is triggered
Recovery Mode is triggered when WordPress detects a fatal error during a normal page load. It does not generally trigger for failures that occur only in cron jobs or other background tasks. The feature can also be disabled by the WP_DISABLE_FATAL_ERROR_HANDLER constant in wp-config.php.
That distinction matters: a password rejection, a security plugin blocklist, or a mail-delivery failure will not be repaired by Recovery Mode. Use the symptom, not simply the fact that you cannot reach the dashboard, to choose this route.
Find and use the special login link
- Open the administrator email account associated with the site. Search spam, quarantine, promotions, and server-side mail filters for a WordPress recovery message.
- Open the message on the same browser and device you will use to sign in. The recovery session is associated with a browser cookie, not permanently with a particular user account.
- Follow the link and sign in when prompted.
- In the dashboard, open Plugins or Themes. WordPress identifies the component associated with the fatal error.
- Deactivate the named plugin or switch away from the named theme. Do not delete it yet; first confirm that normal pages and
/wp-adminwork. - Clear the underlying error, update or replace the component, and only then reactivate it.
Use the link only in a trusted browser. Because the recovery session relies on a cookie, switching browsers or clearing cookies midway can make a valid link appear ineffective. If the message identifies a plugin and the site becomes usable after deactivation, leave that plugin off until you have checked its compatibility and configuration.
If the Recovery Mode email does not arrive
Confirm that the site’s administrator address is correct and that the site can send mail. A blocked or misconfigured mail system can prevent the message even when Recovery Mode is working. If the inbox remains empty, continue with the password and plugin paths below.
Recovery Mode is not a universal unlock. It does not repair a wrong password, an IP blocklist, a damaged mail system, or a login deliberately denied by a security plugin.
Reset your password when you cannot log in to wp-admin
Try “Lost your password?” first
- Open the site’s normal login page and select Lost your password?.
- Enter the account’s username or email address and submit the form.
- Use the reset link promptly and set a long, unique password that is not reused elsewhere.
If no message arrives, check spam and verify that the address is actually attached to the administrator account. Repeatedly submitting the form will not repair a broken outgoing-mail system. Move to a server-side method when mail delivery is the problem.
When more than one administrator exists, make sure you are resetting the intended account. A successful reset for a different user will not restore your own access, and changing usernames or roles during an outage makes later auditing harder.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
Reset an administrator with WP-CLI
WP-CLI is appropriate when you have SSH access to the WordPress installation but the web login is unavailable. First identify the correct account:
Free tools Windows power users keep installed
One-click scans. No signup required.
wp user list --role=administrator --fields=ID,user_login,user_emailThen update the account, replacing the ID and password with your own values:
wp user update <USER_ID> --user_pass='<NEW_LONG_PASSWORD>'The exact option syntax can vary with the installed WP-CLI release. Run wp help user update on the server before changing the account, and avoid placing a real password in shell history or a shared ticket. Use an interactive password method offered by your hosting environment when available.
Run commands from the directory containing wp-config.php, or specify the correct path using your host’s normal WP-CLI option. A command executed against the wrong installation can change a different site. If a plugin prevents WP-CLI from loading, retry the diagnostic command with --skip-plugins; remember that must-use plugins still load.
After the update, open a new private browser window and test the login. If the command reports that the user does not exist, list all users without the role filter and verify that you are operating in the correct WordPress directory.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Use phpMyAdmin only as a last resort
When you have database access but no working mail, SSH, or file access, a hosting control panel may provide phpMyAdmin.
- Export a backup of the WordPress database before editing anything.
- Open the database used by the site and locate the
wp_userstable. The table prefix may not bewp_; use the prefix shown inwp-config.php. - Find the intended administrator by checking the username and email columns.
- Edit that row’s
user_passvalue. - Some hosting instructions tell you to select the
MD5function for this field. Current WordPress documentation does not establish that as the preferred modern procedure, so treat it as an emergency workaround and confirm the method with your host before saving. - Save the row, close phpMyAdmin, and test from a private browser window.
Do not change rows at random, replace the username, or overwrite the entire table. If the reset does not work, restore the backup and use WP-CLI or ask the host to perform the change safely. A database edit should change only the intended password field; changing capabilities, roles, or serialized settings without understanding them can remove access for every administrator.
How to deactivate plugins when locked out of WordPress
A plugin can break the login form, throw a fatal error, redirect every request, or block your IP. Deactivating it is safer than deleting it because its files and settings remain available for diagnosis.
Deactivate one plugin with WP-CLI
From the WordPress installation directory, run:
wp plugin deactivate <plugin-slug>Use the plugin slug shown by wp plugin list. To turn off every ordinary plugin at once, run:
Recommended Free Tools
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
wp plugin deactivate --allIf one plugin must remain active while you disable the rest, use:
wp plugin deactivate --all --exclude=<plugin-slug>Once access returns, reactivate plugins one at a time and test the login and front end after each activation. The first activation that reproduces the failure is your likely cause. Keep notes on the order; reactivating several items together hides conflicts and makes a repeat outage more likely.
Use --skip-plugins for a single WP-CLI command
When a plugin prevents WP-CLI from bootstrapping, prefix a command with --skip-plugins. For example:
wp --skip-plugins plugin listThis skips regular plugins only. Must-use plugins in wp-content/mu-plugins still load, so a failure in a must-use plugin requires host or file-level intervention. Do not assume that a successful skipped command proves the site is fixed; it only proves that the command can run without loading ordinary plugins.
Rename the plugins folder through FTP or a file manager
- Open the site files through FTP, SFTP, or the hosting file manager.
- Go to
wp-content. - Rename
pluginsto a temporary name such asplugins.disabled. - Try
/wp-adminand the front end. - If access returns, rename the folder back to
plugins. WordPress will recognize the directory again, but the plugins will remain deactivated. - Activate each plugin individually from the dashboard, testing after every activation.
Renaming the directory disables all standard plugins, not just the newest one. Do not leave it renamed after testing, because future updates and normal plugin management will fail. If renaming has no effect, the cause may be a must-use plugin, the active theme, a URL mismatch, or a host-level firewall rather than a normal plugin.
When a security plugin has blocked your IP
Try a different trusted network only to determine whether the block is IP-specific; do not use that as the permanent fix. Remove the block through the security plugin’s own controls if you can reach them, or follow the plugin’s documented database procedure with a backup. If neither is possible, deactivate the plugin using WP-CLI or by renaming the plugins directory, then review its blocklist before reactivation.
Tell the host whether the denial follows your account or only your network. A host firewall and a WordPress security plugin are separate controls, so disabling one may not remove a block imposed by the other.
Check wp-config.php for unexpected changes
Download a copy of wp-config.php before editing it. Compare it with a known-good backup or a version-controlled copy and look for changes you did not make.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Review the security keys
Pay particular attention to AUTH_KEY and the other WordPress authentication and nonce keys. Unexpected changes can invalidate existing login cookies or indicate that someone altered the configuration. Do not paste keys into public tickets or forums. If you replace them, expect existing sessions to require fresh authentication.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
A sudden logout of every administrator after an unexplained configuration change is a reason to review the keys, not to keep resetting passwords. Change one setting at a time and retain the original file so the host can compare it with server logs.
Verify the WordPress and site URLs
Confirm that the configured site address uses the intended scheme (https when the site is secured), hostname, and path. A mismatch between the database values and the address you use can cause redirects, mixed-content behavior, or immediate logout.
As a temporary measure, a site owner can place URL overrides above the line that says “That’s all, stop editing!” in wp-config.php:
define( 'WP_HOME', 'https://example.com' );
define( 'WP_SITEURL', 'https://example.com' );Replace the example with the site’s real canonical URL. This is a stopgap, not a substitute for correcting the stored database values. Remove the overrides after the database is fixed, and keep a rollback copy of the file. A wrong path or hostname can make a correct password appear invalid because the browser is being sent to another installation.
If the login page is still not working
Separate account failure from site failure
- If every administrator sees the same fatal error, focus on Recovery Mode, the last code change, and server logs.
- If only one account fails, verify the username, email, role, and password before touching plugins or configuration.
- If the page loads but redirects to another domain, inspect URL values and reverse-proxy or HTTPS settings with the host.
- If the form says the IP is blocked, investigate security-plugin rules and host firewall rules rather than resetting the password repeatedly.
Check the browser and network without confusing the diagnosis
Test the login URL in a private window, clear cookies for that site, and confirm that the browser is reaching the correct domain. These checks remove stale sessions; they do not repair a PHP fatal error or a bad database value. If the failure reproduces in multiple browsers and networks, treat it as a server-side issue.
Use a second network only as a diagnostic comparison. Do not create additional administrator accounts or repeatedly submit passwords while testing; those actions can trigger more security rules and make the original symptom harder to interpret.
Ask the host for logs
Server and PHP error logs can identify the exact plugin file, theme file, or configuration line that caused the failure. Give the host the timestamp, requested URL, and error text. Do not send passwords, database exports, or authentication keys.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Ask for both the web-server and PHP portions of the log when available. The timestamp you recorded before making changes helps the host distinguish the original fatal error from later recovery attempts.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Restore normal operation and harden every administrator account
- Confirm that both the front end and
/wp-adminload in a fresh browser session. - Restore disabled plugins one at a time. Update, replace, or remove the component that caused the failure before enabling it again.
- Review recent plugin, theme, user, and settings changes. An unexplained change may require a broader security investigation.
- Set a strong, unique password for every administrator account involved in the recovery.
- Delete emergency administrator accounts when they are no longer needed, or reduce them to the minimum role required.
- Take a new database and file backup after the site is stable.
- Document the successful recovery path, the offending component, and any configuration changes so the next incident can be handled without risky guesswork.
Do not leave all plugins disabled, a temporary URL override in place, or a renamed directory as the permanent solution. Those are diagnostic measures. The durable fix is to correct or replace the offending code, restore the canonical configuration, and verify that every administrator can authenticate normally.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
The safest sequence is therefore: Recovery Mode for a fatal error, the password-reset flow for an account problem, WP-CLI or a carefully backed-up database edit when mail fails, plugin deactivation for code or blocklist failures, and wp-config.php and host-log checks for URL or configuration problems.
Frequently Asked Questions
What should I do first if I am locked out of WordPress admin?
Check the administrator inbox for the WordPress Recovery Mode email, then try Lost your password?. These options are less invasive than editing files or the database. Choose Recovery Mode only when the symptom indicates a fatal PHP error.
Why did my WordPress Recovery Mode email not arrive?
The administrator address may be wrong, or the site’s outgoing mail may be blocked or misconfigured. Check spam, quarantine, promotions, and server-side filters. Recovery Mode also will not help with a wrong password or a security-plugin IP block.
Can Recovery Mode fix a wrong WordPress password?
No. Recovery Mode is for fatal errors during normal page loads. Use the password-reset flow, WP-CLI, or a carefully backed-up database method for an account credential problem.
How do I reset a WordPress admin password without email?
With SSH access, list administrators with WP-CLI and update the intended user after checking wp help user update. If you have only database access, back up first and use phpMyAdmin as a last resort; confirm the password-hashing method with your host.
How do I deactivate plugins when locked out of WordPress?
Use wp plugin deactivate <plugin-slug> over SSH, or rename wp-content/plugins through FTP or a host file manager. Renaming disables all ordinary plugins. Rename it back after testing, then reactivate plugins one at a time.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWill --skip-plugins disable every WordPress plugin?
No. It skips regular plugins for one WP-CLI command, but must-use plugins in wp-content/mu-plugins still load. A must-use plugin failure requires file-level or host assistance.
Why do I keep getting redirected or logged out immediately?
Check the WordPress and site URLs, including scheme, hostname, and path, along with cookies and security-plugin blocks. A temporary WP_HOME and WP_SITEURL override can help while the stored database values are corrected.
What should I do after I regain access?
Restore plugins individually, fix or replace the component that caused the outage, review unexplained user and setting changes, set unique passwords for all administrators, remove emergency accounts, and create a fresh file and database backup.
The Bottom Line
Work from least invasive to most technical: Recovery Mode for a fatal error, password reset for an account issue, WP-CLI or a backed-up database edit when email fails, plugin deactivation for conflicts or IP blocks, and wp-config.php and host-log checks for URL or configuration problems. Change one thing at a time, verify access in a private window, and harden every administrator account after recovery.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
