Learning Hub · Beginner · 5–15 minutes
How to Reset Your WordPress Password
Everything you need to get back into wp-admin by any legitimate door — the steps, the gotcha, and the tip the support desk gives everyone.
The short answer
In one line: get back into wp-admin by any legitimate door — a beginner-level job taking 5–15 minutes.
Below: the exact steps, the classic pitfall, and a pro tip from the support desk. Where our platform automates a step, the guide says so rather than making you do robot work.
Beginner
Difficulty
5–15 minutes
Time needed
5
Steps
24/7
Help if you're stuck
This guide assumes no prior expertise — just a hosting account, a browser, and 5–15 minutes of attention. Every instruction works on our platform exactly as written, and translates to any standard cPanel host.
Rule of the road: read the gotcha section before you begin, not after — it's harvested from the support tickets of people who didn't.
The shape of the job
Here's the complete route: try the front door first, when email fails, use phpmyadmin, or reset via wp-cli, fix the underlying email problem and harden after re-entry.
None of the stages requires code or a terminal unless the guide explicitly says so — and where it does, the exact commands are given. The full step-by-step sits below; the surrounding sections cover the context that makes it stick.
Where this goes wrong (and how to not)
Forgetting the MD5 dropdown in phpMyAdmin — pasting a plain password without selecting the hash function stores it unusably, and the lockout continues with extra confusion.
It's worth internalising because it's not a rare edge case — it's the single most common way this task generates a support ticket. Knowing it in advance converts the whole job from risky to routine.
The pro tip worth stealing
The database method also rescues sites whose admin email was hijacked — you're editing identity at the storage layer, below whatever an attacker changed in the dashboard.
It costs a minute now and repays it every time this task comes around again — which, like most hosting tasks, it will.
The parts you can skip on our hosting
Several steps in this guide exist because hosting historically made you do them — on our plans, SSL issues itself, backups run daily without being asked, and one-click installers replace manual setup entirely. What remains is the genuinely-yours part of the task.
Stuck mid-task at an odd hour? That's what 24/7 human support is for — describe where you are in this guide and we'll take it from there.

The platform this guide assumes
Tutorials age badly when they're written against imaginary hosting. These are written against ours — the same panel, installer and defaults you'll actually see.
Business email on your own domain is included, not sold back as an add-on.
- Step-by-step, tested as written
- The gotcha flagged before you hit it
- Automation covers the boring steps
- 24/7 support if you get stuck
Why HostingAlly
What you get with every plan
Help on standby
Stuck at step three at midnight? Support answers around the clock, mid-guide included.
The undo is always named
Where a step could bite, the guide says so and gives the reversal.
Written from real tickets
Our guides come from the support desk — the gotchas are the ones people actually hit.
Automation where it belongs
SSL, backups and installs run themselves here — the guide covers only what's genuinely yours to do.
Works as written
Every step tested on our own platform — no 'your host may vary' hand-waving.
No jargon tax
Terms are explained in place or linked to the glossary — nothing assumes you already know.
Getting Started
How to get going
- 1
Try the front door first
'Lost your password?' on the login page emails a reset link — check spam, and allow a few minutes for delivery.
- 2
When email fails, use phpMyAdmin
In cPanel, open the site's database → wp_users table — edit your user's user_pass field, choosing MD5 from the function dropdown and entering the new password.
- 3
Or reset via WP-CLI
Over SSH: wp user update your_username --user_pass='newpassword' — the fastest route when you're comfortable with a terminal.
- 4
Fix the underlying email problem
If reset emails never arrive, the site probably can't send mail reliably — install an SMTP plugin so the next reset (and every form) delivers.
- 5
Harden after re-entry
Once in: unique password in a manager, enable two-factor, and audit other admin accounts while you're thinking about access.
Included
What's covered on our plans
- 24/7 support from real people
- Per-site PHP version selection
- Free website migration handled by our team
- Free SSL certificate on every plan, renewed automatically
- DDoS protection at the network level
- Free domain for the first year on annual plans
- Renewal prices that match signup prices
- LiteSpeed server-level caching
- Daily automatic backups with self-service restores
- Email accounts on your own domain
FAQ
Your questions, answered
Password reset emails never arrive — why?
WordPress sends mail via PHP by default, which inboxes increasingly distrust — an SMTP plugin routing through authenticated email fixes resets, form notifications and order emails in one move.
Could someone else use these database methods against me?
Only with hosting-account access — which is why the hosting login (strong password, 2FA) is the real perimeter. Database-level resets are recovery for owners, not a bypass for strangers.
How long does it take to get started?
Minutes — hosting activates on payment, the domain (free for year one on annual plans) connects immediately, and one-click installers put WordPress or 400+ other apps live the same sitting. If you have an existing site, our team migrates it free, usually within 24 hours.
Do prices go up at renewal?
No — the price you sign up at is the price you renew at. We don't run teaser-rate economics, so there's no year-two ambush to plan around, and your bookkeeping can rely on the number staying put.
Is there a money-back guarantee?
Yes — try the hosting properly and if it doesn't fit, the refund process is a request, not a retention gauntlet. Domain registrations are the one standard carve-out, since registries make those non-refundable the moment they're placed.
What happens if I outgrow my plan?
You upgrade in place — plan changes apply from your client area without migrations or downtime, and our range runs from small shared plans through VPS to dedicated servers, so growth is an account change rather than a new-host project.
Where is your company based?
HostingAlly is a trading name of Bohzo Ltd, a company registered in England and Wales — a real, verifiable business with published terms under English law, which is worth checking about any host before you hand them your domain.
Keep exploring
How to Understand Website Firewalls
Know what a WAF does, where it sits, and what to configure — intermediate level, 20 minutes of reading.
How to Hide the WordPress Login Page
Move wp-login off the default address every bot on earth knows — intermediate level, 15 minutes.
WordPress Hosting
Managed WordPress with LiteSpeed caching, staging and automatic backups.
Web Hosting
NVMe cPanel hosting with free SSL, migration and a free first-year domain.
Ready when you are.
Free SSL, free migration, honest renewals and 24/7 human support. That's the whole pitch.
See Hosting Plans