If the WordPress password reset email never arrives, find out whether the site generated it before changing mail settings. A confirmation on the login screen does not prove a message reached the mailbox. Start with the affected account, make one controlled request, then match its time to the evidence you have.
This applies to a self-hosted WordPress site. Use the site’s verified sign-in address, not a link sent by someone offering to restore access. If the email arrived but its button failed, use the invalid reset link guide instead.
Check the account before changing how the site sends email
- On the site’s own sign-in page, choose Lost your password? and enter the username or email for the account you are authorized to use. A store or membership site may use its own account page; start on the route that failed.
- Check that account’s mailbox, including junk and any quarantine managed by your email provider. The reset goes to the user’s registered address, not necessarily the site’s general admin or contact address. If another authorized administrator can sign in, ask them to verify the account record privately under Users.
- Note the time, timezone and exact screen message. If you still have a working administrator session, keep it open. Reproduce the problem on an authorized test account in a separate browser session rather than repeatedly requesting resets for your only administrator or a customer.
The WordPress password reset documentation explains the native reset path. Custom login forms, membership tools and store account pages may take a different route to send the message.
Trace the request from the site to the mailbox
| What you can verify | What to check next |
|---|---|
| No reset entry at the request time in a log that covers this sender and route | Check whether the reset form reached the right site, found the account, and triggered the email. A missing entry in an incomplete log proves nothing. |
| The site or mail service recorded a failure | Read the error at that time. A sender rejection calls for checking the configured sender and provider requirements, not reinstalling WordPress. |
| The receiving mail server accepted the message, but it is not in the inbox | Ask the mailbox administrator to trace that message using the time and provider message ID. Check quarantine, forwarding and inbox rules. Acceptance is not inbox placement. |
| Other website emails arrive, but this reset never appears | Check the specific reset route and recipient. A successful contact form or mail-plugin test does not exercise the reset form. |
Use the host or mail provider’s existing activity log if it is available. Avoid enabling full message logging on a live site just for this check: the message body can contain an access link. The WordPress mail reference also distinguishes a successful send call from actual receipt.
What a working test email rules out
Suppose a site manager receives an SMTP test email at 10:02, but a password reset from the site’s membership sign-in page at 10:05 has no matching record in the same provider log. The 10:02 message confirms that one send path works. It does not show whether the membership form generated a reset at 10:05 or used that provider. The next useful check is the membership form’s request and sending path, not a DNS change. If the provider does have a 10:05 record, follow that record’s status before changing the form.
On a WooCommerce store, note whether the failed request came from My account or the WordPress sign-in screen. A working order email does not prove that the account reset works. The WooCommerce email troubleshooting guide notes that WordPress reset messages may not appear in the WooCommerce transactional email log. Check the actual sender or provider log before concluding that the message was not generated.
Stop before a mail fix becomes an access problem
If this is your only administrator account and you cannot reach the registered mailbox, ask your host or a verified administrator to help you regain access through their approved process. Do not change the site’s mail settings, disable security controls, edit the database or reuse a customer’s account just to get a test result.
If a change is justified, preserve the previous configuration and test the smallest fix with an authorized account. Confirm that one reset message arrives, then check another business-critical mail flow using an approved test. If contact enquiries or order notifications regress, revert the change and continue the diagnosis separately.