Recover your account

If you can’t log in to WordPress.com, the next step depends on what you’ve lost—your password, your email access, your phone number, or your account itself. This guide helps you find the path that matches your situation, from a quick password reset to verifying your identity with our support team.

Before you follow the steps below, check that your site is hosted on WordPress.com.

Visit our Site Profiler, enter your website’s domain address, and click the Check site button.

Under Hosting Information, if the provider is WordPress.com, the steps on this page will help you recover your account. If you see anything other than WordPress.com, you are using self-hosted WordPress — contact your host to recover access there.

Pick the section that matches your problem. Each option links to step-by-step instructions.

If you still have access to the email address you used to sign up, you can reset a lost password from the login screen. If the password reset email never arrives, or you no longer have access to that email, learn tips for how to log in without your old email address.

Here are some ways to find the username or email address you used for your WordPress.com account.

Learn how to log in without your old email address.

If you requested a password reset, a one-time login link, or a two-step verification code and the email did not arrive, work through the steps in Troubleshoot missing login emails and codes — check your spam folder, allow-list donotreply@wordpress.com, and confirm the right email address is on file for your account.

If the email still does not arrive, the email address on your account may no longer work. Follow the guidance for I lost access to my email above.

If two-step authentication is sending SMS codes to a phone number you no longer have, here is some guidance on how to log in after changing your phone number.

Learn how to restore a closed account. You do not need to use the Account Recovery form for closed accounts.

WordPress.com handles “locked” or “suspended” situations differently depending on the cause. Find the one that matches what you are seeing:

• Too many incorrect passwords in a short time. WordPress.com does not permanently lock your account after failed login attempts. If you entered an incorrect password several times in a row, you may be blocked from signing in for a few minutes. Wait a few minutes and try again with the correct password. If you still cannot log in, reset your password from the login screen or use the Account Recovery form.
• Suspicious sign-in detected. If WordPress.com flags a sign-in attempt as unusual — for example, from a new device or location — you may see a notice on the login screen asking you to confirm it is you. Follow the on-screen instructions to finish signing in. If you are asked to enter a code from your email and the email does not arrive, see I am not receiving the password reset or login link email above.
• Site or content suspended for a policy violation. If your site has been suspended for a Terms of Service or User Guidelines violation, WordPress.com sends an email that begins “Your account or blog has been suspended…” and adds a notice to your dashboard. See Suspended content and sites to appeal the suspension. The appeal form is only for the site owner appealing a suspension — for other access problems, use one of the situations above.

If none of the above describes your problem, you can prove ownership of your account through the Account Recovery form. See Verify your account ownership to learn how to find the information you will need to fill out the form.

Once you’re logged back in to your account, take a few minutes to set up safeguards so you don’t get locked out again:

• Set up account recovery email and SMS so you have alternative options to recover your account.
• Enable two-step authentication and save your backup codes somewhere safe.
• Update your email address to keep the email on file current so password resets reach you.