Where WordPress stores your login details

Your WordPress username and password live in two places: the email account you used to set up WordPress, and the database that runs your website. If you can still access that email, you can reset your password in minutes. If you cannot, you will need to contact your hosting provider or use a database tool called phpMyAdmin.

The method you use depends on whether you remember your username, whether you can access your email, and what kind of hosting you have. Most people can solve this in under an hour without calling anyone.

Key Takeaways

  • If you remember your username and can access your email, use the WordPress login page's "Lost your password?" link to reset it in minutes.
  • If you cannot access your email, you can change your password directly in phpMyAdmin if your hosting provider gives you access to it.
  • Your hosting provider's control panel (cPanel, Plesk, or their own dashboard) usually has a phpMyAdmin button that takes you to your database.
  • If you have never set up phpMyAdmin before, contact your hosting provider's support — they can reset your password or walk you through the database steps.
  • Write down your username and password in a password manager like Bitwarden or 1Password after you regain access, so you do not lose them again.

Using the WordPress password reset link

Go to your WordPress login page — usually yoursite.com/wp-login.php or yoursite.com/wp-admin. Look for the "Lost your password?" link below the login fields. Click it.

Type in either your username or the email address you used when you created the WordPress account. WordPress will send a password reset link to that email. Open your email, find the message from your site, and click the reset link. It takes you to a page where you can create a new password. Type a strong password (at least 12 characters, mixing uppercase, lowercase, numbers, and symbols), then log in with your username and the new password.

This method works as long as you can access the email account tied to WordPress. It is the fastest and safest route.

Finding your username if you only have the email

If you reset your password but cannot remember your username, WordPress will tell you. On the password reset page, after you enter your email, WordPress displays your username before sending the reset link. Write it down.

If you have already reset your password and forgot to note the username, log in with your email address instead — WordPress accepts either your username or your email at the login screen. Once you are logged in, go to Users in the left menu, click your name, and you will see your username displayed on that page.

Resetting your password through phpMyAdmin

If you cannot access your email, you can change your password directly in the WordPress database using phpMyAdmin. This requires access to your hosting control panel.

Log into your hosting control panel (cPanel, Plesk, or your host's custom dashboard). Look for phpMyAdmin — it is usually under "Databases" or "Tools". Click it. You will see a list of databases on the left side. Find the one that matches your WordPress site name (often something like "sitename_wp" or "wordpress"). Click it.

In the list of tables that appears, find the one called "wp_users" (or "yourprefix_users" if your site uses a custom prefix). Click it. You will see a row with your username. Click the Edit button (pencil icon) next to your username. Find the field called "user_pass". In the Function column next to it, select "MD5" from the dropdown. In the Value field, type your new password. Click Go. WordPress will encrypt it automatically.

Log out of phpMyAdmin and try logging into WordPress with your username and new password.

What to do if you cannot access phpMyAdmin

Some hosting providers restrict phpMyAdmin access or do not offer it. If you click the phpMyAdmin button and see an error, or if your control panel does not have a phpMyAdmin option, contact your hosting provider's support team.

Tell them: "I need to reset my WordPress admin password. Can you either reset it for me, or give me access to phpMyAdmin?" Most providers will reset it within a few hours. Some will ask you to verify your identity by providing the email or phone number on the account.

If your hosting provider cannot help, you may need to hire a WordPress specialist or use a service like WP Engine's support (if you host with them). The cost is usually $50 to $150 for a password reset.

Protecting your username and password going forward

Once you regain access, store your username and password in a password manager. Bitwarden, 1Password, and Dashlane are common choices. A password manager keeps your login details encrypted and fills them in automatically, so you do not have to remember them or type them into unsecured places.

Use a strong password: at least 12 characters, with uppercase and lowercase letters, numbers, and symbols. Avoid passwords based on your name, birthdate, or common words. Do not use the same password for WordPress as you use for your email or other accounts — if one is compromised, the others stay safe.

Consider enabling two-factor authentication on WordPress. Install a plugin like Wordfence or Jetpack, then turn on two-factor authentication in your WordPress settings. This means that even if someone gets your password, they cannot log in without a code from your phone.

Why you should not store passwords in your browser

Your browser can save passwords, but it is less find than a dedicated password manager. Browser passwords are stored locally on your computer and can be accessed by malware or by anyone with physical access to your device. A password manager encrypts your passwords and stores them on find servers, so they are harder to steal.

If you have been using your browser to save your WordPress password, change it now. Go to Users in WordPress, click your name, scroll to Account Management, and set a new password. Then delete the old password from your browser's saved passwords and save the new one in a password manager instead.

Frequently Asked Questions

Can I see my password if I have already logged in?

No. WordPress does not store passwords in a readable form — it encrypts them so that even WordPress staff cannot see them. If you are logged in and want to change your password, go to Users, click your name, and use the "New Password" section to set a new one.

What if I do not know my hosting provider?

Check the email you received when you first set up your website. It usually says something like "Welcome to [Host Name]" and includes your hosting account details. You can also look at your domain registrar (GoDaddy, Namecheap, etc.) — they often show which host your domain points to. If you still cannot find it, search your email for "cPanel" or "hosting" and look for the oldest messages.

Is it safe to use a password reset link from email?

Yes. WordPress password reset links expire after 24 hours and work only once. They are sent to your email, which is encrypted in transit. The only risk is if someone has access to your email account — in that case, reset your email password first, then reset your WordPress password.

What if the password reset link does not work?

Check that you clicked the link within 24 hours — older links expire. Make sure you are using the correct email address. If the link still does not work, your hosting provider may have disabled email on your server. Contact them and ask if mail functions are enabled, or use the phpMyAdmin method instead.

Can I have multiple WordPress usernames?

Yes. WordPress allows multiple user accounts with different roles (Administrator, Editor, Author, Contributor). If you have multiple accounts, you can reset the password for any of them using the "Lost your password?" link. If you need to find all usernames on your site, log in as Administrator, go to Users, and you will see the full list.