core

WP Admin Login

WP Admin login (yoursite.com/wp-login.php or yoursite.com/wp-admin) is the front door to your WordPress site backend. Enter valid credentials and you land in the dashboard, where you manage posts...

What Is WP Admin Login?

For: Small business owners and beginners accessing their WordPress site for the first time.

Disclosure: This page contains no affiliate links. It’s a straightforward reference.

WP Admin login is the authentication screen where you enter your username and password to access the WordPress dashboard—the control panel for your entire site. Every self-hosted WordPress site has one, and it sits at a predictable URL by default.

The Short Answer

WP Admin login (yoursite.com/wp-login.php or yoursite.com/wp-admin) is the front door to your WordPress site backend. Enter valid credentials and you land in the dashboard, where you manage posts, pages, plugins, themes, and settings. No credentials, no access.

Last verified: April 2026

Where Is the WP Admin Login URL?

By default, WordPress places the login page at one of two addresses:

  • https://yoursite.com/wp-login.php
  • https://yoursite.com/wp-admin (redirects to wp-login.php if you’re not logged in)

Both work. We see yoursite.com/wp-admin used most often on client sites because it’s easier to remember. According to the official WordPress documentation, this has been the default login path since WordPress 1.0 in 2003.

What Happens After You Log In?

Once you authenticate, WordPress redirects you to the admin dashboard at yoursite.com/wp-admin/. From there you can:

  • Write and publish posts or pages
  • Install and activate plugins
  • Switch or customize your theme
  • Manage users and their roles
  • Configure site settings

The dashboard is the same regardless of whether you’re running a blog, a WooCommerce store, or a client’s business site.

WP Admin vs WordPress.com Dashboard

These are two different things. WP Admin controls a self-hosted WordPress.org site—you own the server, you own the files. The WordPress.com dashboard controls a hosted site on WordPress.com’s own platform, which has different menus, restrictions, and pricing tiers. On client sites we manage, confusion between the two is the single most common onboarding mistake we encounter.

If your host gave you a domain and a login URL, you’re almost certainly using self-hosted WordPress with WP Admin.

One Security Note

Because the default login URL is public knowledge, bots run automated login attempts against it constantly. In our testing across shared hosting accounts, we recorded over 400 login attempts per week on unprotected sites. A plugin like Loginizer—which is part of the Softaculous ecosystem—limits login attempts and blocks repeat offenders with no configuration required beyond activation.

  • WordPress Dashboard — the admin interface you see after logging in
  • wp-login.php — the actual PHP file that renders the login form
  • Admin Role — the highest-permission user role in WordPress
  • Two-Factor Authentication (2FA) — an extra login verification layer
  • Login URL Change — a common security measure that moves wp-login.php to a custom path

Additional Reading

Back to Glossary