Likely fix
Fix: wp-admin is blocked, 403, or 404
wp-admin can be blocked by a security plugin, hosting firewall, wrong file permissions, changed login URL, .htaccess rules, or server configuration.
Quick answer
Check whether a security plugin changed the login URL or blocked your IP. Then check .htaccess, file permissions, and hosting firewall logs.
Important warning
If your IP is blocked by a security plugin, repeated attempts can extend the lockout.
Try this
- 1 Try opening /wp-login.php directly.
- 2 Check whether a security plugin changed the login URL.
- 3 Try from another network or mobile data.
- 4 Disable security plugins temporarily by renaming their plugin folders.
- 5 Check .htaccess for wp-admin or login restrictions.
- 6 Check hosting firewall or WAF logs.
- 7 Check file and folder permissions if the error is 403.
Common causes
Security plugin changed login URL.
IP blocked by firewall.
Bad .htaccess rule.
Wrong permissions.
Hosting WAF block.
Plugin conflict.
What to check next
- Check /wp-login.php.
- Check whether mobile data works.
- Check security plugin settings.
- Check .htaccess.
- Check hosting firewall logs.