How to Fix WordPress Login Redirect Loop (wp‑admin Keeps Refreshing)

wordpress login redirect loop

You enter your username and password, click Log In, and instead of reaching the dashboard…
you’re sent right back to the login page.

Again.
And again.
And again.

No error message. No warning. Just an endless loop.

If your WordPress login keeps redirecting or wp‑admin keeps refreshing, you’re dealing with what’s known as the WordPress login redirect loop – and it’s one of the most frustrating issues WordPress users face.

The good news?
This problem looks scary, but it’s completely fixable, even if you’re not a developer.

In this guide, I’ll walk you through:

  • Why the WordPress login redirect loop happens
  • How to identify the real cause
  • Step‑by‑step fixes that actually work
  • How to prevent it from happening again

Let’s fix it – calmly and safely.

What Is the WordPress Login Redirect Loop?

A login redirect loop happens when WordPress fails to maintain your login session.

You log in successfully, but WordPress:

  • Can’t store your session
  • Can’t verify cookies
  • Or detects conflicting settings

So instead of loading /wp-admin, it redirects you back to /wp-login.php – over and over.

This issue usually affects:

  • /wp-admin access
  • Dashboard login
  • Admin users (sometimes only admins)

Common Signs of a Login Redirect Loop

You’re likely facing this issue if:

  • wp‑admin keeps refreshing after login
  • You’re redirected back to the login page repeatedly
  • Login works in incognito but not normal browser
  • Frontend works, but admin panel doesn’t

No error message appears at all

Pro Tip!

If the login redirect loop disappears after disabling a plugin or switching a theme, note exactly what changed. This helps you avoid reinstalling the same problematic plugin or theme later and saves time if the issue ever returns.

Why Does the WordPress Login Redirect Loop Happen?

This issue doesn’t occur randomly. One (or more) of the following causes is almost always responsible.

1. Incorrect Site URL or WordPress URL

If your Site Address and WordPress Address don’t match exactly, WordPress can’t create a valid login session.

Even small differences like:

  • http vs https
  • www vs non‑www
    can trigger the redirect loop.

2. Browser Cookies or Cache Issues

WordPress relies heavily on cookies for authentication.

If cookies are:

  • Blocked
  • Corrupted
  • Cached incorrectly
    the login process fails silently.

3. Plugin Conflicts

Security, cache, or redirect plugins are common culprits.

A single misconfigured plugin can interfere with:

  • Login cookies
  • Session handling
  • Admin redirects

4. Theme Problems

Some themes include custom login logic or outdated code that breaks admin authentication.

5. Corrupted .htaccess File

A damaged .htaccess file can force endless redirects – especially after migrations or permalink changes.

6. SSL / HTTPS Misconfiguration

If SSL is partially enabled (for example, frontend uses HTTPS but admin doesn’t), WordPress becomes confused and keeps redirecting.

7. Database URL Mismatch

Sometimes the database still contains old URLs, even after moving to HTTPS or a new domain.

How to Fix WordPress Login Redirect Loop (Step by Step)

Follow these fixes in order.
After each step, try logging in again.

Step 1: Clear Browser Cookies & Cache (Quick Check)

Before touching your website files, rule out a browser issue.

What to do:

  • Clear cookies and cache
  • Try a different browser
  • Use incognito/private mode

If login works in incognito, the issue is local, not WordPress.

wordpress admin not loading

Step 2: Verify WordPress URL Settings

Incorrect URLs are one of the top causes of login redirect loops.

If you can access the dashboard:

Go to:
Settings → General

Make sure:

  • WordPress Address (URL)
  • Site Address (URL)

✔ Are identical
✔ Use the same protocol (https)
✔ Use the same domain version (www or non‑www)

If you cannot access wp‑admin:

Edit the wp-config.php file.

Add this near the top:

define('WP_HOME', 'https://yourdomain.com'); define('WP_SITEURL', 'https://yourdomain.com');

Save the file and try logging in again.

Step 3: Disable All Plugins (Very Important)

Plugin conflicts are extremely common with login issues.

How to disable plugins without dashboard access:

  1. Open your site using FTP or hosting File Manager
  2. Go to wp-content
  3. Rename the plugins folder to plugins-disabled

This disables all plugins instantly.

🔹 If login works now → a plugin caused the loop
🔹 Rename the folder back and activate plugins one by one to find the culprit

Step 4: Switch to a Default WordPress Theme

Themes can also interfere with login sessions.

How to switch themes without wp‑admin:

  1. Go to wp-content/themes
  2. Rename your active theme folder
  3. WordPress will automatically switch to a default theme

Try logging in again.

Step 5: Regenerate the .htaccess File

A broken .htaccess file can force endless redirects.

How to fix it:

  1. Locate .htaccess in your root directory
  2. Download a backup
  3. Delete the file
  4. Try logging in

Once access is restored:

  • Go to Settings → Permalinks
  • Click Save Changes to regenerate it

Step 6: Fix SSL & HTTPS Issues

SSL misconfiguration is a silent killer.

Check these:

  • Is your site loading on HTTPS?
  • Does your SSL certificate work?
  • Is HTTPS forced inconsistently?

You can force SSL by adding this to wp-config.php:

define('FORCE_SSL_ADMIN', true); 

Pro Tip!

Login redirect loops often happen on sites that are overloaded with unnecessary plugins or outdated tools. Regularly review your plugins and remove anything you’re not actively using. A lighter WordPress setup is more stable, faster, and less error‑prone.

Step 7: Clear WordPress Cache (If Applicable)

If you were using a caching plugin before the issue:

  • Delete its cache folder via FTP
  • Or clear cache from hosting panel

Cached redirects can persist even after fixing the problem.

Step 8: Update Site URLs in the Database

If your site was recently migrated, URLs may still be outdated.

Use a database tool like phpMyAdmin:

  • Find wp_options
  • Update:
    • siteurl
    • home

Ensure they match your current domain exactly.

Step 9: Check File Permissions

Incorrect permissions can block login sessions.

Recommended permissions:

  • Folders: 755
  • Files: 644

Pay special attention to:

  • wp-admin
  • wp-includes

When the Issue Is Not a Redirect Loop

Sometimes the problem looks similar but has a different cause.

Identifying the right problem saves hours of frustration.

How to Prevent Login Redirect Loops in the Future

Prevention matters just as much as fixing.

Best practices:

  • Use trusted plugins only
  • Avoid multiple cache or security plugins
  • Always back up before updates
  • Keep WordPress, themes, and plugins updated
  • Use proper SSL configuration
  • Avoid manual URL changes without checking database

Frequently Asked Questions (FAQs)

Why does wp admin keep refreshing after login?

Usually due to cookie issues, incorrect URLs, plugin conflicts, or SSL misconfiguration.

Yes. Server caching, firewall rules, or misconfigured PHP sessions can trigger it.

Sometimes – but it should be your last option, not the first.

No. It’s frustrating, not harmful. Your data is usually safe.

Final Thoughts

The WordPress login redirect loop feels overwhelming, especially when there’s no error message to guide you. But once you understand the causes, the fix becomes systematic – not stressful.

Follow the steps one by one, don’t rush, and your dashboard access will be restored.

And remember: most WordPress problems look bigger than they really are.

Similar Posts

Leave a Reply

Your email address will not be published. Required fields are marked *