How to reset your WordPress password

How to recover access to your WordPress site when you've forgotten your password, using the built-in reset tool.

Forgetting your WordPress password happens to everyone. The good news: WordPress has a built-in password reset tool that works quickly, as long as you can access the email address on your account.

Quick summary

Go to your WordPress login page, click Lost your password?, enter your username or email, and check your email for a reset link. Click the link, choose a new password, and log in. Once the email arrives, the rest takes just a few minutes.

What you'll need

Access to the email address linked to your WordPress account
Your WordPress login URL (see how to find your WordPress login URL if you're unsure)

If you don't have access to that email address, scroll down to the section on what to do when you can't access your email.

How to reset your password

Go to your WordPress login page. This is usually at yoursite.com/wp-admin. For help finding it, see how to find your WordPress login URL.

Click "Lost your password?" This link appears below the Log In button on the login screen.

Enter your username or email address. Type either one into the field — WordPress accepts both. Then click Get New Password.

Check your email inbox. WordPress shows "Check your email for the confirmation link" and sends a password reset email to the address on your account. The subject line is usually "[Your Site Name] Password Reset". Delivery can take a few minutes, and these emails sometimes land in spam, so check there if you don't see it.

Click the link in the email. The email contains a unique reset link. Click it — this link is only valid for a short time (usually 24 hours), so don't wait too long.

Choose a new password. WordPress suggests a strong, random password (click Generate Password for a different one). You can keep it or type your own. We recommend at least 16 characters, mixing letters, numbers, and symbols.

Click Save Password. WordPress saves your new password and shows "Your password has been reset." It doesn't log you in automatically, so click Log in and sign in with your new password.

Done

Once you see "Your password has been reset," you can log in with your new password. Go to your login page, enter your details, and you're back in.

If you don't receive the reset email

If the email doesn't arrive within 5 minutes:

Check your spam or junk folder. Password reset emails are sometimes filtered.
Check you entered the right email. It must be the address on your WordPress account. If WordPress says "There is no account with that username or email address," try your username instead, or another address you might have used.
Check you're looking in the right inbox. You may have multiple email addresses — make sure you're checking the one registered with WordPress.
Try again. Go back to the login page and request another reset link.

If none of these work, see help, I can't log in or contact us.

If you can't access the email address on your account

This is more complicated. If the email address on your account is one you no longer have access to, you won't be able to use the standard reset process.

Options:

If another Administrator user can access the site, they can log in and change your email address or reset your password from inside the WordPress dashboard under Users.
If Chykalophia manages your site, contact us — we can assist.
As a last resort, a developer can reset a password directly via the hosting control panel or database. Contact us if this is needed.

Easy to miss

Reset links expire quickly — usually within 24 hours. If you click an expired link, just request a new one from the login page.

Choosing a strong new password

When you set your new password, make it strong. We recommend a password that:

Is at least 16 characters long
Mixes uppercase and lowercase letters
Includes numbers and symbols (like !, @, #, %)
Is not a word from the dictionary
Is unique to WordPress — don't reuse a password from another account

WordPress's suggested passwords are strong and random. We recommend using one and saving it in a password manager. See using a password manager with us.

Common questions

How do I find out which email address is on my account?

If you can't log in and don't know the email address, contact Chykalophia. We can look it up for you. Alternatively, if you have another Administrator account, that user can check under Users in the dashboard.

I changed my password but now I can't remember the new one either.

Request another password reset from the login page. This time, save the new password in a password manager so you don't lose it again.

Can I change my password without the reset email?

If you're already logged in, yes. Go to Users → Profile in your dashboard and scroll down to the Account Management section. Click Set New Password. WordPress suggests a strong password; keep it or type your own. Then click Update Profile.

The reset link says it's invalid or has expired.

Reset links are single-use and time-limited, and requesting a new link cancels any older one. Go back to the login page and click Lost your password? again to request a fresh link, then use the newest email.

Someone else needs a password reset — can I do it for them?

Yes, if you're an Administrator. Go to Users → All Users in your dashboard, click that person's username, and scroll to Account Management. The simplest option is Send Reset Link, which emails them a link to choose their own password (it doesn't change their current password). Or click Set New Password, then Update User, and send them the new password securely.

Need a hand?

If you're stuck, email support@chykalophia.com and we'll help. Include your website address and a screenshot if you can.

Learn more

Reset your password — WordPress.org documentation

How to reset your WordPress password

On this page