Cómo iniciar sesión en un sitio de WordPress: La guía completa de 2026

You're usually looking for WordPress login help at the exact moment you need to update something fast. A page needs fixing, a plugin needs attention, or someone just sent you credentials and said, “Can you get into the site?” Then /wp-admin doesn't work, the password doesn't look familiar, and now it feels more complicated than it should.

The good news is that logging into WordPress is usually straightforward once you identify which kind of WordPress site you have. That's the part most guides skip. They jump straight to one login URL, even though that only covers self-hosted installs and not every real-world setup.

Clarifying Your WordPress Login Starting Point

The first thing to figure out is whether you're trying to access a self-hosted WordPress site Sitio web de WordPress.com. That distinction matters because the login flow is different.

A lot of confusion starts here. Many beginner guides explain wp-admin as if it applies to every WordPress site, but WordPress.com uses its own account login and management flow, so there isn't one universal answer to how to log into a WordPress site, as noted on the WordPress.com login page.

How to tell which one you have

A quick way to identify it is to think about how the site was originally set up.

  • WordPress autohospedado usually means the site lives with a hosting provider like GoDaddy, SiteGround, Kinsta, WP Engine, or another web host. Someone installed WordPress on a domain you control.
  • WordPress.com means the site is managed through a WordPress.com account, more like signing into a central service account than logging directly into server-installed software.

If a developer gave you hosting credentials, mentioned cPanel or a host dashboard, or talked about themes and plugins on a hosted server, you're probably dealing with WordPress autohospedado.

If you normally sign in through a central account and see multiple sites in one account dashboard, it's more likely WordPress.com.

Regla práctica: If /wp-admin feels like it should work but doesn't, stop guessing and confirm the platform first. Using the wrong login path wastes time.

Why this matters immediately

Your platform decides all of this:

Pregunta WordPress autohospedado WordPress.com
Main login path Usually a site-specific URL Central account login
De restablecimiento de contraseña Tied to the site install Tied to the WordPress.com account
Ruta de soporte Host, developer, or site admin WordPress.com account support
Acceso de emergencia Often through hosting panel Through the account system

Once you know which side you're on, the login process gets much simpler.

Accessing Your Self-Hosted WordPress Dashboard

For most business websites, the fastest path in is still the default WordPress login URL. On a self-hosted site, the standard method is to add a known admin path to your domain.

A professional woman working on a laptop dashboard login screen in a modern office environment.

A foundational login method is to append paths like /wp-admin/, /wp-login.php, /login/, o /admin/ to the site's domain, and on a fresh installation /admin/ or /login/ often redirects automatically to the login page, according to WPMU DEV's guide to finding the WordPress login URL.

The standard login URLs to try

Empecemos con estos:

  1. yourdomain.com/wp-admin/
  2. yourdomain.com/wp-login.php

If one redirects or loads the login screen, you're in the right place. Enter the nombre de usuario o dirección de correo electrónico associated with the site, then the password.

Some installs also respond to:

  • yourdomain.com/login/
  • yourdomain.com/admin/

Those aren't the first URLs I try on an older or customized site, but they can work on fresh installs or redirect cleanly.

When the site is in a folder or subdomain

This trips people up all the time. The admin path has to follow the actual install location.

Here are the common patterns:

  • Root domain install
    example.com/wp-admin/

  • Subdirectory install
    example.com/wordpress/wp-login.php

  • Subdomain install
    blog.example.com/wp-admin/

If WordPress was installed in a folder like /blog/, /site/, o /wordpress/, the login page won't be on the root domain. That's why typing only example.com/wp-admin/ may fail even when the site itself is healthy.

If you inherited the website, check the public URL structure first. The login path usually mirrors where WordPress actually lives.

What happens after you log in

Successful login takes you into the WordPress dashboard, where you can manage pages, posts, plugins, users, and settings. If your next step is adding functionality, this practical guide to installing plugins on WordPress is a useful walkthrough.

If your site is hosted with GoDaddy, it also helps to understand how hosting environments affect the dashboard experience. This overview of usando WordPress a través de GoDaddy explains some of the management quirks site owners run into.

How to Log Into a WordPress.com Website

WordPress.com works differently. You're not logging into a specific site through a server-level WordPress login page in the same way. You're logging into your Cuenta de WordPress.com, and that account gives you access to the websites connected to it.

A person holding a tablet displaying the WordPress.com dashboard interface for managing websites and blog content.

That means if you've been trying site-specific URLs and nothing makes sense, but you know the site is on WordPress.com, stop trying self-hosted paths. Use the account login instead.

The normal WordPress.com workflow

You'll sign in through the WordPress.com login page using the email address, username, and password tied to your account. After that, you can access the dashboard for the site or sites managed under that account.

This is why WordPress.com can feel simpler for non-technical users. You don't need to remember a separate login URL for every site.

What usually confuses first-time users

The biggest issue is mixed instructions. Someone searches for how to log into a WordPress site, finds advice about wp-admin, and assumes that applies everywhere. On WordPress.com, it often doesn't.

A few quick checks help:

  • If you were invited as a user, use the account you were invited with.
  • If you manage multiple sites, make sure you're choosing the right one after login.
  • If your credentials don't work, reset the password for the WordPress.com account, not the website domain itself.

Use the login system that matches where the site is administered. For WordPress.com, think account-first, not site-path-first.

Once you're in, the interface may still look like WordPress, but the access model is different from a self-hosted installation.

Troubleshooting Common WordPress Login Issues

If the login page loads but you still can't get in, the problem usually falls into a small group of issues. Most of them are fixable without doing anything drastic.

A four-step infographic illustrating troubleshooting methods for resolving common WordPress login issues and technical errors.

You forgot the password

Comience con el ¿Olvidaste tu contraseña? or ¿Olvidaste tu contraseña? link on the login page. That's still the cleanest fix if the site's email system is working.

If the reset email doesn't arrive:

  • Check spam and promotions folders
  • Confirm you're using the correct username or email
  • Try another known email tied to the site
  • Ask the site owner or previous developer which admin account was used

The login URL doesn't work

A self-hosted site normally uses a standard path, but custom login URLs are common on maintained websites. If a developer changed the login slug or added a redirect, the default address may no longer open the form you expect.

Before assuming the site is broken, check whether WordPress is installed in a folder or subdomain. The standard path for a self-hosted site is to append /wp-admin/ or /wp-login.php to the domain, and that install path must be included for subfolders or subdomains, as shown in WPMayor's WordPress login guide.

Browser issues can block a valid login

Sometimes the credentials are right and the URL is right, but the browser session is the problem.

Try this short checklist:

  • Open an incognito or private window
  • Limpiar la memoria caché y las cookies del navegador
  • Disable browser extensions temporarily
  • Prueba un navegador diferente
  • Try another device on a different network

These steps help isolate cookie loops, stale cache, autofill mistakes, and session problems.

A visual walkthrough can help if you're working through several possible causes in a row.

Security plugins and custom redirects

A lot of site owners harden the login page with plugins that change the default URL, add CAPTCHA, or redirect unknown login requests somewhere else. If someone built or secured the site before you got access, ask whether they changed the login path.

A hidden login page often means the site is protected, not broken.

If you can reach the login screen but credentials still fail, check whether a password manager is filling an old password or the wrong username. That's more common than people expect.

Essential Security Practices for Your Login Page

Once you regain access, secure the entry point before you move on. The WordPress login screen is one of the first places attackers probe because the default URL is easy to guess.

WordPress login access is often intentionally obscured with custom login URLs to reduce automated attacks, and login-protection plugins show how standard this has become in modern administration, as discussed in Kinsta's WordPress login URL security guide.

A graphic showing five essential steps to secure your WordPress login for improved website security.

What to tighten first

You don't need an elaborate security stack to make meaningful improvements. Start with the basics that directly protect login access.

  • Use contraseñas seguras y únicas for every admin account. Don't reuse the same password from email, hosting, or another website.
  • Habilitar la autenticación de dos factores if your setup supports it. That extra verification step blocks a lot of preventable account takeovers.
  • Limitar los intentos de inicio de sesión so repeated failed sign-ins trigger restrictions instead of endless guessing.
  • Keep HTTPS active so login data is encrypted in transit.
  • Review user accounts and remove old admins, ex-contractors, and unused editor accounts.

Why custom login URLs help

Changing the default login path won't replace good password hygiene, but it does reduce exposure to low-effort automated probing. On managed sites, it's common to replace the default endpoint with a custom slug and redirect unauthorized requests elsewhere.

That doesn't make a weak site secure by itself. It does remove an obvious front door.

A broader checklist is useful if you're responsible for a business site and want to go beyond login protection. Cleffex Digital's web security guide is a good reference for common web application safeguards that support a more durable setup.

Good security is easier than repeated recovery

If you've ever had to hunt for a hidden login URL, wait on a password reset, or clean up after a compromised admin account, the value of prevention becomes obvious fast.

A steady maintenance routine helps more than one-time cleanup. That's why many teams use structured Planes de mantenimiento de WordPress to keep plugins, updates, backups, and login protections under control.

Secure the login page while you still have access. It's much easier than rebuilding access after something goes wrong.

Fallback Methods for Regaining Admin Access

If the direct login path fails and password resets aren't getting you anywhere, you still have options. These are the methods I treat as emergency access routes.

Use your hosting dashboard first

Many managed hosts offer an SSO or manager login that opens WordPress from the hosting panel without requiring you to re-enter WordPress credentials. That's especially helpful when the normal login page is blocked, customized, or tied up in a plugin issue, as explained in ChemiCloud's admin panel login guide.

Look for buttons or labels such as:

  • Log in to WordPress
  • admin login
  • SSO
  • Manage site
  • Abrir panel de control

This is usually the safest fallback because it avoids editing the site directly before you've regained access.

Use the database only if you're comfortable

If hosting-panel login isn't available, a more technical last resort is resetting the admin password in phpMyAdmin. This means finding the WordPress users table in the site database and updating the password for the correct account.

This can work, but it's easy to make a mistake if you're unsure which database belongs to the live site or which user record is the active admin. If you aren't comfortable inside the database, pause there and get help.

One more safety habit matters here. Before making any advanced recovery changes, make sure you have a recent backup or know how to roll back. This guide on restoring WordPress sites from backups is worth keeping handy before you touch anything deeper than the login screen.


If you're locked out, unsure which WordPress setup you have, or just want someone to straighten out access without risking the live site, Uno nueve helps businesses manage and support WordPress sites every day. We can help you regain admin access, clean up login issues, and keep the site stable after you're back in.

Diseño. Desarrollo. Gestión.


Cuando quieres lo mejor, necesitas especialistas.

Hablemos
Hasta arriba