← Back to WordPress not working

Likely fix

Fix: wp-admin is blocked, 403, or 404

wp-admin can be blocked by a security plugin, hosting firewall, wrong file permissions, changed login URL, .htaccess rules, or server configuration.

Quick answer

Check whether a security plugin changed the login URL or blocked your IP. Then check .htaccess, file permissions, and hosting firewall logs.

Important warning

If your IP is blocked by a security plugin, repeated attempts can extend the lockout.

Try this

  1. 1 Try opening /wp-login.php directly.
  2. 2 Check whether a security plugin changed the login URL.
  3. 3 Try from another network or mobile data.
  4. 4 Disable security plugins temporarily by renaming their plugin folders.
  5. 5 Check .htaccess for wp-admin or login restrictions.
  6. 6 Check hosting firewall or WAF logs.
  7. 7 Check file and folder permissions if the error is 403.

Common causes

Security plugin changed login URL.

IP blocked by firewall.

Bad .htaccess rule.

Wrong permissions.

Hosting WAF block.

Plugin conflict.

What to check next

  • Check /wp-login.php.
  • Check whether mobile data works.
  • Check security plugin settings.
  • Check .htaccess.
  • Check hosting firewall logs.

FAQ

Why is wp-admin showing 403?

A 403 usually means access is forbidden by file permissions, firewall rules, security plugin settings, or server configuration.

Can a security plugin hide wp-admin?

Yes. Some plugins change the login URL or block IP addresses after failed attempts.

Why does wp-admin show 404?

The login URL may have been changed, rewrite rules may be broken, or the WordPress files may be missing or moved.

Related fixes

Fix: WordPress pages show 404 or permalinks are broken

WordPress permalink 404 errors usually happen when rewrite rules are missing, .htaccess is broken, the server does not support rewrites, or a plugin changed URL handling.

Fix: WordPress critical error or white screen

A WordPress critical error or white screen is usually caused by a plugin conflict, theme error, PHP fatal error, memory limit issue, or failed update.

Fix: WordPress password not working

A WordPress password can stop working because the wrong account is being used, password reset emails are not arriving, cookies are broken, or a security plugin is blocking login.

Fix: WordPress login page keeps refreshing or redirecting

A WordPress login redirect loop is usually caused by bad cookies, wrong site URL settings, caching, HTTPS mismatch, or a plugin conflict.

Fix: WordPress broke after update

WordPress can break after updating core, plugins, themes, PHP, or WooCommerce because of compatibility issues or failed update files.

Fix: WordPress admin is slow

A slow WordPress admin is usually caused by heavy plugins, slow hosting, WooCommerce database load, external API calls, object cache problems, cron jobs, or low PHP memory.