Solving the weird pop-up when you try to access wp-admin

If you're getting a weird pop-up when you try to access yourwebsite.com/wp-admin, your regular WordPress username and password don't work, and clicking "Cancel" gives you an error like "Unauthorized access", then this article is for you.

This is actually a security feature put in place by the server or web hosting team, to block brute force attacks on your login page.

What's a brute force attack?

Brute force attacks are automated scripts that try a variety of username/password combinations to get into your WP back end, often starting with the username "admin". This is why at Pixl we never ever use "admin" as the WordPress username. If your username is "admin"... you REALLY need to change that. Read more on the WordPress codex, or watch this quick explainer on how these attacks work:

So how do I access my site?

Chances are your web hosting provider sent you an email beforehand explaining they'd implemented this new security feature, and telling you to use the provided username/password to access your site. So just check your email.

Otherwise, log in to your web hosting support platform and send in a support ticket to request help.

Back when we used Serverfreak, they did this. I'm not sure how other hosting providers handle it.

Have any questions or anything to share? Hit the comments :)