Title: Redirect loop when hitting `/wp-admin` directly
Last modified: September 6, 2026

---

# Redirect loop when hitting `/wp-admin` directly

 *  Resolved [Hammy Havoc](https://wordpress.org/support/users/hammyhavoc/)
 * (@hammyhavoc)
 * [1 month, 1 week ago](https://wordpress.org/support/topic/redirect-loop-when-hitting-wp-admin-directly/)
 * Admins who directly go to `/wp-admin` to administer the site get redirected to`/
   switch-profile/`, they pick the admin user and get redirected back to the switcher.
    -  This topic was modified 1 month, 1 week ago by [Hammy Havoc](https://wordpress.org/support/users/hammyhavoc/).

Viewing 1 replies (of 1 total)

 *  Plugin Author [David Parker](https://wordpress.org/support/users/dlparker1005/)
 * (@dlparker1005)
 * [1 month, 1 week ago](https://wordpress.org/support/topic/redirect-loop-when-hitting-wp-admin-directly/#post-19012773)
 * Hi [@hammyhavoc](https://wordpress.org/support/users/hammyhavoc/),
 * There are likely two separate things going on here, and the 1.0.3 update that
   I just pushed should help with both.
 * The first is the redirect itself. ProfileSwitch Lite was sending every login 
   to the switcher whether or not the account had any profiles linked, so an admin
   with none was being sent there for no reason. The new “Show Switcher on Login”
   setting under ProfileSwitch > General covers that. Setting it to “Only if there
   are multiple profiles” will send those admins straight to wp-admin.
 * The second is landing back on the switcher after picking a profile. Lite was 
   quietly ignoring a failed security check on the switch form and just re-rendering
   the picker, which would look exactly like what you are describing. It now shows“
   That request expired. Please choose a profile again.” I also marked the switcher
   page as never-cache, since a cached copy of it would serve a stale security token.
 * If you still see it on 1.0.3, one detail would help a lot: when you land back
   on the switcher, does the URL pick up profileswitch_action=login? If it does,
   WordPress is sending you back through the login form, which would point at the
   login cookie rather than the switcher itself. If the URL stays the same and you
   see the expired message, it is the security token.
 * Thank you for reporting this!

Viewing 1 replies (of 1 total)

You must be [logged in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fredirect-loop-when-hitting-wp-admin-directly%2F%3Foutput_format%3Dmd&locale=en_US)
to reply to this topic.

 * ![](https://ps.w.org/profileswitch-lite/assets/icon-256x256.png?rev=3710063)
 * [ProfileSwitch Lite - Family Accounts & Child Profiles](https://wordpress.org/plugins/profileswitch-lite/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/profileswitch-lite/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/profileswitch-lite/)
 * [Active Topics](https://wordpress.org/support/plugin/profileswitch-lite/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/profileswitch-lite/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/profileswitch-lite/reviews/)

 * 1 reply
 * 2 participants
 * Last reply from: [David Parker](https://wordpress.org/support/users/dlparker1005/)
 * Last activity: [1 month, 1 week ago](https://wordpress.org/support/topic/redirect-loop-when-hitting-wp-admin-directly/#post-19012773)
 * Status: resolved