I'm Locked Out of My WooCommerce WP-Admin

Diagnosing Why You're Locked Out

"Locked out" covers several genuinely different scenarios, and the right fix depends on which one applies — a forgotten password, a security plugin's automated lockout after failed attempts, or a fatal error preventing the login or admin page from loading at all each need a completely different recovery approach.

Matching the Fix to the Cause

• Forgotten password with a working email reset unavailable (email not sending, as covered elsewhere) — a password can be reset directly via phpMyAdmin (updating the user's password hash) or WP-CLI's wp user update command if you have that level of access.
• A security plugin's login lockout after too many failed attempts, which usually has a defined wait period, or can be cleared by deactivating the plugin temporarily via FTP or by clearing its lockout records directly in the database.
• A fatal error on the login or admin page caused by a plugin or theme, resolved the same way as any plugin-caused crash — renaming the offending plugin's folder via FTP to force deactivation.
• Two-factor authentication issues (a lost device, an expired backup code) may need direct database intervention to disable 2FA temporarily if no other recovery method works.

Step-by-Step Recovery

1. Determine the specific cause — try loading both the login page and a random admin URL to see whether it's a login-specific issue or a broader site crash.
2. For a password issue, use phpMyAdmin or WP-CLI to reset it directly if the normal email-based reset isn't available.
3. For a security plugin lockout, wait out the lockout period, or access the database/files directly to clear it sooner if urgent.
4. For a fatal error, use FTP to identify and deactivate the offending plugin or theme.

Need urgent help regaining access to a locked-out store? See WooCommerce fixes.