Policies & Safety

Account Recovery

At some point, you may run into a situation in which you’ve lost access to your account. We want to ensure that you take the necessary steps to avoid getting locked out and set up your WordPress.com account to be recoverable.

Password Reset Process

It’s crucial to remember your password and to keep it secure, but there might come a time when you forget your password. If you need to reset a forgotten password, use the lost password form.


Enter your WordPress.com username or email address into the text box and click Get New Password. (If you don’t know your WordPress.com username or email address, scroll down to the Account Recovery Form section below.)

We’ll then send an email to the address associated with your WordPress.com account.

To reset your password, click on the button in the email that says Reset Password. Clicking on this link takes you to a form that prompts you to enter your new password twice.


Be sure to click Reset Password at the bottom and you’re all set.

↑ Table of Contents ↑

SMS Recovery with Two-Step Authentication

For added security on your WordPress.com account, you have the ability to enable Two-Step Authentication. If you use your mobile number for Two-Step Authentication, you can reset your password by entering the code sent to your mobile phone into the SMS Account Recovery box.


You will then be prompted to create a new password. Click Reset my password! and voilà — you can now log in to WordPress.com using your new password.

↑ Table of Contents ↑

Account Recovery Form

If you’ve misplaced your log-in information, the email address or username you’ve entered isn’t recognized, and you can’t use Two-Step Authentication to reset your password, you can access your account using the Account Recovery Form. On this form, you can provide certain pieces of information, under Proof of Ownership, to verify that you are the owner of the blog in question:

  • Transaction ID: A transaction ID is a unique alphanumeric code generated for your payment. If you purchased an upgrade on the site with credit card, PayPal, or another method, you can retrieve a transaction ID from your the respective account statements, or locating a past WordPress.com receipt sent to your email address.
  • Activation URL or key: When you created your WordPress.com account, we sent an activation link to your email address that you were required to click. If the email you received included a confirmation button instead of a link, you can copy the activation URL by right-clicking on the button and selecting “Copy Link Address” (this text may be vary slightly depending on your browser).
  • Two-Step Authentication Codes: If you have two-step authentication enabled on your account, you can provide a current code from your authenticator app to prove ownership.

At the bottom of the form, you can add any other details that may help. Then, click Recover My Account. We will contact you with a response or a request for additional information. Once we have proof verifying you are the blog owner, you will be able to reset your password and regain access to your WordPress.com account.


Please do not use this form if you deleted your account. For that scenario, check the Account Restoration steps.

↑ Table of Contents ↑

Recovery Email and SMS Number

In your Account Settings, you can go to the Account Recovery tab and add an alternative email and SMS number. In the event you don’t have access to your primary WordPress.com contact information, you can use the recovery email and SMS number to verify your identity.

↑ Table of Contents ↑

If Ownership Cannot be Established

In the event that it isn’t possible to provide an email from the email address with which the blog was registered, a transaction ID, or the original activation link, access to the account cannot be granted for security purposes.

We have a strict policy in place to protect our users from third parties who might try to use our support system to gain access to other users’ accounts.

The following options are available in this circumstance:

  • If there’s personal information on your blog, you may request that we set it to private so that search engines and users can’t access it. 
  • If the site is set to private but still shows up in Google search results, you will need to wait until your results drop in the search engine. You may request that Google remove a website from their index through the website removal request tool
  • You can opt out of seeing ads personalized based on your visits to sites in the WordPress.com network.

If you want to start blogging again, you can create a new account by signing up here.

P2 Account Recovery

If you operate a P2 and have account a recovery request or question please contact p2@wordpress.com.

Not quite what you're looking for?

Get Help