What this problem looks like
WordPress stores password hashes in wp_users.user_pass. You never store plain text passwords in the database.
If login fails after a correct reset, the issue is often cookies, security plugins, or wrong site URL rather than the password itself.
Reset via wp-login email
- Visit yoursite.co.uk/wp-login.php?action=lostpassword.
- Enter the admin username or email.
- Open the email link within the expiry window.
- Choose a new strong password.
Reset with WP-CLI
wp user list --role=administrator
wp user update admin --user_pass='NewStrongPassw0rd!'
Reset in phpMyAdmin
Open wp_users, find your admin row, and edit user_pass. WordPress expects a phpass hash, not plain text.
Easiest path: use WP-CLI or a one-time functions.php snippet that calls wp_set_password().
add_action( 'init', function () {
if ( isset( $_GET['emergency_reset'] ) && $_GET['emergency_reset'] === 'CHANGE_ME' ) {
wp_set_password( 'TemporaryPass123!', 1 );
}
} );
When password reset does not fix login
Check siteurl and home URLs, disable security plugins via FTP, and clear browser cookies for the domain.
Brute-force plugins may lock your IP. Wait or whitelist your IP in the plugin folder rename trick.
Create a new admin user
wp user create newadmin [email protected] --role=administrator --user_pass='NewStrongPassw0rd!'
When to stop DIY and hire help
Repeated lockouts often mean malware or a broken auth plugin. BugShield fixes WordPress login issues at a fixed price when password resets alone do not work.