The WordPress admin area is the central administration interface of your website. Here you create and edit pages and posts, install plugins and themes, manage users, adjust settings, and perform updates.
With a standard WordPress installation, you can access the admin area via your domain with the addition /wp-admin/. Alternatively, you can access the actual WordPress login page via /wp-login.php call up.
In this guide, we will show you how to log in to WordPress, where to find the right login address, and what you can do if /wp-admin/ does not work, the login page keeps redirecting, or you have forgotten your login credentials.
Briefly explained: Give
https://deine-domain.ch/wp-admin/into your browser. If you are not logged in yet, WordPress will usually redirect you automatically to the login page. There you log in with your WordPress username or email address and your password.
What is the WordPress admin area? #
The WordPress admin area is often also referred to as Dashboard, Backend or WordPress Administration referred to as.
It is separate from the publicly visible part of your website, the so-called frontend.
Visitors see, for example:
- your homepage
- Subpages
- Blog posts
- Products of an online shop
- Contact forms
In the WordPress admin area, on the other hand, you manage the content and technical functions behind the website.
Depending on the user role, the following areas are available there, for example:
- Posts
- Pages
- Media
- Comments
- Design
- Plugins
- User
- Tools
- Settings
Which menu items you actually see depends on your WordPress user role and the installed plugins.
Open WordPress admin area via /wp-admin/ #
With a standard WordPress installation in the root directory of your domain, you can access the admin area via:
Replace your-domain.ch through your actual domain.
For example, if your website is at meinefirma.ch can be reached, the address is accordingly:
If you are already logged in, WordPress opens the dashboard directly. If you are not logged in yet, you will normally be redirected to the login page.
Access WordPress directly via wp-login.php #
Alternatively, you can access the actual WordPress login page directly:
Both ways lead to the same destination in a standard WordPress configuration.
The difference mainly consists in that /wp-admin/ refers to the protected administration area, while wp-login.php is the actual WordPress login page.
How to log in to WordPress #
WordPress Login Step by Step #
- Open your web browser.
- Call
https://deine-domain.ch/wp-admin/on. - WordPress displays the login page or redirects you there.
- Give your WordPress username or your email address one.
- Give your WordPress password one.
- Activate if necessary „Stay signed in“.
- Click on „Sign in“.
- After successful login, the WordPress admin area opens.
When logging in to a new WordPress installation for the first time, use the credentials of the administrator account created during the installation.
Where can I get my WordPress login credentials? #
The username and password of the WordPress administrator are set during the installation of the website.
If you installed WordPress yourself, you provided this information during the installation. If installed via Softaculous, the administrator username, password, and email address are also set during the installation process.
We explain how to set up a new WordPress installation at CURIAWEB in our guide Install WordPress with Softaculous.
If your website was created by an agency, a developer, or someone else, they may have set up a separate user account for you.
WordPress password and CURIAWEB access are different accounts #
A common mistake is mixing up different login credentials.
Your WordPress user account is not the same as your access to:
- CURIAWEB Customer Center
- cPanel
- FTP
- an email inbox
- phpMyAdmin or the database
These systems perform different tasks and usually have their own access credentials.
Just because your CURIAWEB customer center password works, it doesn't automatically mean you can use the same password for WordPress.
Important: Do not use the same password everywhere for WordPress, cPanel, email, and other important services. Different, unique passwords prevent a compromised account from automatically endangering other systems.
What do I see after logging in? #
After a successful login, you usually reach the WordPress Dashboard.
On the left side is the main navigation. You can use it to access the various administration areas of your website.
The main menu items include:
- Dashboard: Overview and Updates
- Posts: Manage blog posts
- Media: Manage images and other media files
- Pages: manage static pages
- Comments: Moderate comments
- Design Themes and, depending on the configuration, additional design features
- Plugins: Manage WordPress plugins
- User: Manage user accounts and roles
- Tools: various administrative functions
- Settings: basic WordPress configuration
Plugins can add additional menu items. Therefore, not every WordPress dashboard looks exactly the same.
Why am I not seeing certain menu items? #
For example, if Plugins, Design or certain settings are missing, this does not necessarily have to be an error.
WordPress has a role and capability system. An administrator is allowed to change significantly more settings than, for example, an author or editor.
Therefore, a user without administrator rights cannot see certain administration areas at all.
We explain how the individual roles work in detail in our guide Managing WordPress users: Properly setting up accounts, roles, and permissions.
WordPress was installed in a subdirectory #
If WordPress is not located directly in the root directory of your domain, you must include the installation directory in the login address.
For example, was WordPress under:
installed, the admin area is usually:
and the direct login address:
The same principle applies to other subdirectories.
We explain how to set up such an installation in our guide Install WordPress in a subdirectory with Softaculous.
WordPress is installed on a subdomain #
A WordPress installation can also be run on a subdomain.
For example, if your website is at:
works, the admin area is usually:
The subdomain is treated as an independent website in the process.
The login address has been changed by a security plugin #
Some WordPress security plugins can change the default login address or restrict direct access to wp-login.php or rather /wp-admin/ restrict.
In this case, the normal address may intentionally no longer work.
For example, if an individual login address has been set up, you must use it.
If you have forgotten them, you should not randomly try different addresses or make changes to the database. First, check which security plugin is being used and whether the custom login address has been documented.
What does „Keep me signed in“ mean? #
On the WordPress login page, you will usually find the option „Stay signed in“.
If you enable this, WordPress can save your login in the browser for a longer period of time. This means you do not have to log in again every time you visit the admin area.
On your own protected computer, this feature can be practical.
On the other hand, you should not activate them on public, shared, or unfamiliar devices.
Safety rule: Do not use „Stay signed in“ on publicly accessible computers, shared devices, or devices whose security you do not control.
Log out of WordPress after work #
To log out of WordPress, hover your mouse pointer over your user profile or your name in the top right corner of the admin area and select „Log out“.
Especially on foreign or shared devices, you should always log out completely after working.
Simply closing the browser window does not necessarily end a saved WordPress session immediately.
Forgot WordPress password #
If you reach the login page but no longer know your password, you don't need to reinstall WordPress.
Click on the login page:
„Forgot password?“
You can then enter your username or the email address associated with your WordPress account. WordPress will usually send you a link to set a new password.
We explain the various recovery options step by step in our guide Forgot WordPress password: Recover admin access.
Password recovery email is not arriving #
If you request password recovery but do not receive an email, first check:
- spam or junk folder
- whether the email address used is correct
- whether the email inbox is accessible
- whether other WordPress emails are delivered
If WordPress generally has problems sending system notifications, the mail delivery should be checked and, if necessary, configured via SMTP.
CURIAWEB customers have access to this for GoSMTP PRO free available. We explain the setup under Send WordPress emails via SMTP.
No access to the registered email address #
If you have forgotten your password and at the same time no longer have access to the registered email address, the normal password recovery cannot be completed.
However, with access to your hosting, there is another option: the password can be reset directly via the WordPress database.
For this, CURIAWEB is available to you phpMyAdmin available via cPanel.
You can find the complete procedure in our guide Change WordPress password via phpMyAdmin.
WordPress reports „Error: Incorrect username or password“ #
If WordPress rejects your login, check the simple causes first.
- Is the username spelled correctly?
- Are you using the correct email address?
- Is your keyboard's Caps Lock on?
- Was a space accidentally inserted when copying the password?
- Is your password manager perhaps using an old password?
- Are you on the right WordPress website?
Especially with multiple WordPress websites, it can happen that a password works for one installation, but not for another.
Browser or password manager is using old credentials #
Browsers and password managers can automatically fill in WordPress credentials. This is convenient, but after a password change, it can lead to confusion.
If WordPress rejects the login despite a newly set password, completely delete the automatically entered password and enter the new password manually.
Alternatively, you can test logging in using a private or incognito window in your browser.
/wp-admin/ shows a 404 error page #
If /wp-admin/ a 404 error page is displayed, it might not just be a wrong password.
Possible causes are:
- WordPress is installed in a subdirectory
- You are using the wrong domain or subdomain.
- The login address has been changed
- WordPress files are missing or have been moved
- a security configuration is blocking access
- there is a faulty server or redirection configuration
Therefore, first check under which address WordPress was actually installed.
/wp-admin/ keeps redirecting #
When you log in, but WordPress keeps returning to the login page, it is often called a Login-Redirect-Loop.
There are various possible causes for this:
- faulty or outdated browser cookies
- incorrect WordPress URL
- wrong website URL
- Issues after a domain change
- HTTP/HTTPS conflicts
- Plugin conflicts
- Cache issues
- faulty redirects
Start with the simplest tests: delete the cookies for the domain in question or open the login page in a private browser window.
If the problem persists, the cause should be investigated systematically.
WordPress login no longer works after switching to HTTPS #
After an SSL or HTTPS migration, incorrect URL settings or redirects can cause the admin area to no longer be accessible correctly.
For example, a website can choose between:
http://deine-domain.ch
and
to derive back and forth.
Also differences between a domain with and without www can cause problems in the event of an incorrect configuration.
We explain how to set up SSL correctly in WordPress in our guide Enable SSL in WordPress and set up HTTPS correctly.
WordPress shows a white page after login #
If the login basically works, but afterwards only a blank or white page appears, it is probably not a normal login problem.
Possible causes can include, for example:
- PHP error
- Plugin conflicts
- Theme error
- insufficient PHP resources
- faulty or incompatible updates
In this case, you should not repeatedly change your password. The access credentials may be correct while the website is unable to output the administration interface due to a technical error.
WordPress reports a critical error #
If the message appears when accessing the admin area that on the website a critical error occurred, this usually indicates a PHP or WordPress error.
Such errors are often related to:
- a plugin
- a theme
- an incompatible PHP version
- a failed update
- individual PHP code
The problem cannot be solved by simply creating a new WordPress user or resetting your password.
If the error occurred immediately after an update, our guide will also help you Updating WordPress: Keeping Core, Plugins, and Themes Secure and Up to Date in systematic troubleshooting.
Can a plugin prevent the WordPress login? #
Yes. Plugins can have a direct or indirect impact on the login process.
This includes, for example:
- Security plugins
- Login protection
- Firewall extensions
- Two-factor authentication plugins
- Membership Plugins
- Redirection plugins
- Caching plugins
Even a normal bug in a plugin can cause the admin area to no longer load.
If a plugin has been identified as the cause, deactivation may be necessary. We explain how this works in our guide. Deactivate or delete WordPress plugins.
Can a theme block the admin area? #
Even a faulty theme or custom PHP code in the theme can cause a fatal WordPress error.
This is possible, for example, if changes are made directly in the file functions.php were made and the inserted PHP code contains a syntax or runtime error.
Therefore, custom code adjustments should not be made directly and uncontrollably in an updatable parent theme.
For more extensive theme customizations, we will explain the use of a later WordPress Child Themes.
WordPress admin area no longer accessible after an update #
If the admin area stops working immediately after an update, first note down which component was updated last.
That may be the case:
- WordPress Core
- a plugin
- a theme
- PHP
Do not change several other components at the same time. The fewer variables you change during troubleshooting, the easier it is to identify the cause.
Our guide to secure updating of WordPress, plugins, and themes also explains why updates should be carried out in a controlled manner and tested afterwards.
What is the difference between WordPress.com and a self-hosted WordPress website? #
With a self-hosted WordPress installation at CURIAWEB, it runs WordPress as software on your web hosting.
Registration is therefore done directly via your own website, for example:
That is not the same as an account on WordPress.com.
If your website is hosted on CURIAWEB, you do not need a WordPress.com account for the normal login to your self-hosted WordPress website.
If you have been using WordPress.com so far and want to transfer your website to your own hosting, we cover this process in our guide Switch from WordPress.com to CURIAWEB Webhosting.
Can I bookmark /wp-admin/? #
Yes. If you regularly manage your WordPress website, you can save the admin area address as a bookmark in your browser.
Save for example:
This saves you from having to re-enter the address every time.
The bookmark only saves the address. You should not store your password unprotected in notes or in the name of the bookmark.
Should I use the username „admin“? #
For a new WordPress installation, there is no technical reason the easily predictable username admin to use.
While a unique username does not prevent attacks on the login page, it at least reduces the predictability of part of the login credentials.
Remain much more important:
- a strong and unique password
- current WordPress, plugin, and theme versions
- only actually required administrators
- a secure hosting environment
- two-factor authentication for increased security requirements
What is two-factor authentication? #
At the Two-Factor Authentication (2FA) the password alone is not sufficient for logging in. Additionally, a second factor is required, for example a time-limited code from an authenticator app.
Even if an attacker knows the WordPress password, this additional factor can prevent unauthorized login.
For websites with multiple administrators, mission-critical content, or WooCommerce, 2FA can be a useful additional protective measure.
Avoiding public computers for WordPress #
Avoid logging in to the WordPress admin area from publicly accessible or untrusted computers whenever possible.
You cannot reliably assess whether a foreign device, for example:
- saves access data
- Malware contains
- Keystrokes logged
- does not completely delete browser sessions
For administrative tasks, use a dedicated, well-maintained, and protected device if possible.
Login only fails for one user #
If other WordPress users can log in without any issues and only a specific account is affected, it is probably not a general issue with /wp-admin/ Before.
Then check in particular:
- Username and password
- registered e-mail address
- User role
- whether the user account still exists
- whether a security plugin blocks the user
An administrator can manage existing accounts under Users → All Users check.
You can find further information in our guide Manage WordPress users.
Login is no longer working for any user #
If suddenly no user can log in anymore, an individual password problem is less likely.
Then you should check, among other things:
- whether the login page is generally accessible
- whether a plugin or theme was recently updated
- whether the domain has been changed
- whether HTTP has been switched to HTTPS
- whether a security plugin has made any changes
- whether redirects are faulty
- whether there is a PHP or server error
In such a situation, do not reset the passwords of all users one after the other. First, look for the common technical cause.
Check your own profile after successful login #
Once you have access to the admin area again, you can check your user profile.
To do this, open:
User → Profile
Check in particular:
- your email address
- your display name
- your personal settings
- whether your password is stored securely
A current e-mail address is particularly important because it can be used for password recovery and other WordPress notifications.
Typical mistakes during WordPress login #
- Use CURIAWEB customer center access instead of WordPress access
- confuse the cPanel password with the WordPress password
- open incorrect domain or subdomain
- Forgotten subdirectory of the WordPress installation
- use old credentials from the password manager
- Do not check spam folder for password recovery
- with a changed login address still only
/wp-admin/try out - unnecessarily reset the password in the event of a technical error
- keep me signed in on a public computer
- use the same password for WordPress, cPanel, and email
Note: If
/wp-admin/accessible and WordPress merely rejects your password, it is probably a login issue. If, on the other hand, the login page itself is not working, redirect loops occur, or a critical error is displayed, you should look for a technical cause.
When should you contact CURIAWEB support? #
If you can no longer access the WordPress admin area and the cause is unclear, you can contact our support as a CURIAWEB customer.
Describe the problem as specifically as possible. Helpful examples include:
- the affected domain
- the requested login address
- the exact error message
- whether the public website is still working
- Whether "ob" is an abbreviation for something specific or a typo in your source text, it translates to **whether** or **if** in English (from German, for example). If you intended a specific context, please provide the full sentence.
/wp-admin/or ratherwp-login.phpis reachable - whether the problem occurred after an update or a change
Do not send your WordPress password unsolicited in a support ticket. For an initial technical analysis, your password is usually not required.
Summary #
You can reach the admin area of a standard WordPress installation via https://deine-domain.ch/wp-admin/. Alternatively, you can access the login page directly via https://deine-domain.ch/wp-login.php open. If installed in a subdirectory or on a subdomain, the address must be adjusted accordingly.
For the login you use your WordPress user account. This is independent of the CURIAWEB customer center, cPanel, FTP, or your email account. If you have forgotten your password, first use the WordPress password recovery. If access to the registered e-mail address is no longer possible either, the password can alternatively be reset via phpMyAdmin.
If the login page itself is unreachable, WordPress keeps redirecting, or a critical error appears, it is probably not a simple password issue. In that case, check plugins, HTTPS configuration, and recent actions, among other things. WordPress updates.
