You Do Not Have Permission to Access /wp-admin/: Fix

What this problem is

You can see a message like You don't have permission to access /wp-admin/. This is typically a web server access control issue, not a WordPress role issue.

Why it happens

.htaccess rules denying access to wp-admin
Security plugin added deny rules
WAF/mod_security false positive
Incorrect file/folder permissions

Prerequisites

FTP/File Manager access
Access to hosting security/WAF logs (optional)

Diagnosis

Check the HTTP status. This issue is commonly 403. If it is 401, it may be basic auth.

Detailed steps

Step 1) Temporarily disable .htaccess rules

Rename the site root .htaccess to .htaccess.bak and retest. WordPress can regenerate it later.

Step 2) Check for wp-admin specific deny rules

Search for:

deny from all
Require all denied

Remove or adjust rules that block your IP.

Step 3) Disable the security plugin (file method)

Rename the plugin folder in wp-content/plugins and retest.

Step 4) Verify permissions

Folders: 755
Files: 644
wp-config.php: 600 or 640 (host-dependent)

Step 5) Check WAF/mod_security events

In the hosting panel, look for blocked requests to /wp-admin and allowlist the rule or path if safe.

Expected results

/wp-admin loads (or returns the normal login page)
403/permission message disappears

What to do if it fails

Ask hosting support to confirm which rule is denying access and why
Check if there is an IP restriction in a separate server config (nginx/apache vhost)

Best practices

If you restrict wp-admin by IP, keep a safe allowlist process for dynamic IPs
Document any custom server rules applied to WordPress