Walkthrough · Beginner · 5–15 minutes
How to Reset Your WordPress Password
How to regain wp-admin access through whichever legitimate route remains open, without the guessing — the steps in order, the snag ahead of time, and the tip our support team repeats daily.
The short answer
One line covers it: regain wp-admin access through whichever legitimate route remains open — a beginner-level job of roughly 5–15 minutes.
Below are the precise steps, the classic stumble, and one tip from the support desk. Wherever the platform already does a step for you, the guide says so rather than handing you a machine's chores.
By the Hosting & Domains team · Reviewed 18 August 2026
Beginner
Skill rating
5–15 minutes
Time budget
5
Steps in total
24/7
Support on call
No prior knowledge assumed — a hosting account, a browser and 5–15 minutes of attention is the whole entry requirement. Every instruction runs on our platform exactly as printed, and carries over to any standard cPanel host.
First rule: read the snag section before you start, not afterwards. It was distilled from the tickets of everyone who tried the other order.
How the work divides up
Set out end to end, the route is: try the ordinary reset first, use phpmyadmin when email fails, or use wp-cli, fix the mail path as well and tighten things up once you are back in.
No part of this needs code or a terminal unless the guide says so plainly — and where it does, the exact commands are printed. The step-by-step is below, with the surrounding sections supplying the context that makes it hold.
Where it comes off, and how to stay on
Missing the MD5 dropdown in phpMyAdmin. A plain password pasted in without the hash function stores a value WordPress cannot check, so the lockout continues with an extra layer of confusion on top.
It earns a section of its own because it is no obscure edge case — it is the single commonest reason this task reaches a support queue. Knowing it in advance turns the whole job from risky into routine.
A habit worth borrowing
The database route also rescues a site whose admin email address has been hijacked. You are rewriting identity at the storage layer, underneath anything an attacker altered through the dashboard.
A minute spent now repays itself every time this job comes round again — and like almost every hosting job, come round it will.
What a Hosting & Domains plan spares you
Some steps in this guide exist only because hosting traditionally forced them on you. Here the SSL issues itself, the copy is taken daily without being asked, and one-click installers remove the manual setup. What is left is the part that was always genuinely yours.
Stopped mid-guide at an awkward hour? That is exactly what round-the-clock support is for — say which step you are on and we take it from there.
Why this job is shorter on our plans
Tutorials written against imaginary hosting go stale fast. Ours are written against the real thing: the same panel, installer and defaults waiting in your account.
Hosted somewhere else already? We move the whole site at no charge, usually within 24 hours, and it goes on answering visitors throughout.
- Every step checked exactly as published
- The snag named before it arrives
- The dull steps taken out of your way
- People reachable at any hour you stall
Why Hosting & Domains
Standard on every plan
Honest about how big it is
Regain wp-admin access through whichever legitimate route remains open is a beginner-level job — set aside 5–15 minutes, with the platform-absorbed steps marked.
Help that keeps your hours, not ours
Stuck on step three at midnight? Support answers at any hour, mid-walkthrough included.
Works exactly as printed
Every step is proven on the platform we run — none of the 'your host may vary' hedging.
Jargon never charges you
Every term is defined on the spot or linked to the jargon buster — nothing assumes prior knowledge.
Taken from real tickets
These guides came out of the support queue, so every snag flagged is one people genuinely hit.
Every undo written out
Any step that could bite is marked, together with the exact way to wind it back.
Quick Start
Order placed to site online
- 1
Try the ordinary reset first
The 'Lost your password?' link on the login form sends a reset link by email. Look in the spam folder and give it a few minutes before writing the route off.
- 2
Use phpMyAdmin when email fails
From cPanel, open the database belonging to that site and locate wp_users. Edit the user_pass field on your row, choose MD5 from the function dropdown, and type the replacement password as the value.
- 3
Or use WP-CLI
From an SSH session: wp user update your_username --user_pass='newpassword'. Comfortably the quickest route for anyone already at ease in a terminal.
- 4
Fix the mail path as well
A reset email that never arrives means the site cannot send mail reliably. Fit an SMTP plugin so the next reset — and every notification a contact form sends — genuinely lands somewhere.
- 5
Tighten things up once you are back in
Set a new password from a password manager, switch two-factor on, and while you are there look at exactly who else holds administrator rights.
Built In
Fitted to every plan
- PHP versions set per site from the control panel
- Spam and virus screening on every mailbox by default
- Softaculous included for one-click application installs
- WordPress and 400+ further applications installed in one click
- WordPress Toolkit, with the updates seen to for you
- Your existing site brought across by our engineers, at no charge
- Free SSL on every plan, reissued before the old one lapses
- Upgrades applied in place, with no migration when you change plan
- 99.9% uptime as the target, watched around the clock
- SSH, Git and Composer on the developer plans
Frequently Asked
The questions that come up most
Why do WordPress reset emails never arrive?
WordPress sends through PHP by default, and inbox providers grow warier of that every year. An SMTP plugin pushing mail through an authenticated mailbox fixes resets, form notifications and order confirmations all at once.
Could an attacker use these database methods on my site?
Only after getting into your hosting account first, which is why the hosting login, with a strong password and two-factor, is the perimeter worth defending. Database resets are an owner's way back in, not an outsider's way through.
How quickly can a site be live?
Quickly — minutes rather than days. The account opens the moment payment clears, the domain (free for the first year on annual plans) attaches straight away, and the one-click installer has WordPress or any of 240+ applications running before your coffee cools. Site already somewhere else? Send the details and we move it free, normally within a day.
Do plans include copies I can restore myself?
Yes — every plan gets a daily copy, and the restore runs from your panel in minutes: files, databases or both, at three in the morning with no ticket queue in the way. Keeping a further copy offsite is still a sound habit, and nothing here stops you.
Keep reading
How to Install WordPress
Have WordPress live and answering on your domain within ten minutes — beginner level, about 10 minutes.
How to Create a WordPress Child Theme
Customise a theme so the next update rolls through without erasing your work — intermediate level, about 20 minutes.
WordPress (Glossary)
A single term without the jargon: what it means, why it counts, and where it catches people out.
Drupal Hosting
Drupal with Composer, Drush and per-site PHP control to hand.
VPS Hosting
KVM virtual servers — root access, DDoS filtering, one flat monthly figure.
Changing hosts? Run through our checklist first.
A plain order of work for a move nobody visiting will notice: which files go over first, how to carry the mail across without losing a message, when exactly to repoint DNS, and the two mistakes behind nearly every outage we are asked to rescue.
Do it properly this time.
Free SSL, a free migration, renewals billed at the original rate, and people on support around the clock. That is the whole of it.
View Drupal Hosting plans