diff --git a/security/logging-in.md b/security/logging-in.md
index cbd8f94..9c8096a 100644
--- a/security/logging-in.md
+++ b/security/logging-in.md
@@ -1,7 +1,153 @@
-# Your password
+# Logging In
 
-Creating an extension [of this post about resetting your password](https://wordpress.org/documentation/article/resetting-your-password/), but placing all technical details here.
+This guide covers WordPress authentication—accessing your site, managing login sessions, and resetting passwords.
 
-[See this issue on github on sections to take over](https://github.com/WordPress/Documentation-Issue-Tracker/issues/79) with the following note:
-- promote WP CLI above the other options, for being the safest.
+## Accessing the Login Page
 
+The WordPress login page is located at `wp-login.php` in your site's root directory:
+
+```
+https://example.com/wp-login.php
+```
+
+Visiting `/wp-admin/` while logged out redirects to the login page automatically.
+
+### Login Form Fields
+
+- **Username or Email Address:** Enter either your username or the email associated with your account
+- **Password:** Your account password (case-sensitive)
+- **Remember Me:** Keeps you logged in for 14 days instead of the default session length
+
+## Login Cookies
+
+WordPress uses cookies to manage authentication. Understanding these helps with troubleshooting and security configuration.
+
+| Cookie | Purpose |
+|--------|---------|
+| `wordpress_[hash]` | Authentication cookie (for insecure/non-HTTPS logins) |
+| `wordpress_logged_in_[hash]` | Indicates logged-in status to the frontend |
+| `wordpress_sec_[hash]` | Secure authentication cookie (for HTTPS logins) |
+
+**Note:** The `wordpress_sec_[hash]` cookie is used when you log in over a secure connection (HTTPS), which is strongly recommended for all sites. Non-secure logins (HTTP) are vulnerable to credential theft and should be avoided.
+
+**Default expiration:** 2 days (48 hours). When **Remember Me** is checked, cookies persist for 14 days.
+
+### Cookie Configuration
+
+**Changing cookie expiration** requires the [`auth_cookie_expiration`](https://developer.wordpress.org/reference/hooks/auth_cookie_expiration/) filter. Add to your theme's `functions.php` or a custom plugin:
+
+```php
+add_filter( 'auth_cookie_expiration', 'custom_cookie_expiration', 10, 3 );
+
+function custom_cookie_expiration( $length, $user_id, $remember ) {
+    if ( $remember ) {
+        return 30 * DAY_IN_SECONDS; // 30 days when "Remember Me" is checked
+    }
+    return 2 * DAY_IN_SECONDS; // 2 days for standard login (default)
+}
+```
+
+**Cookie domain** can be set in `wp-config.php` for subdomain sharing:
+
+```php
+define( 'COOKIE_DOMAIN', '.example.com' );
+```
+
+## Troubleshooting Login Issues
+
+### "Cookies are blocked or not supported"
+
+This error appears when WordPress cannot set the test cookie (`wordpress_test_cookie`) or authentication cookies:
+
+- **Browser settings:** Ensure cookies are enabled for your site
+- **Plugin conflicts:** Disable plugins temporarily to test
+- **Cookie domain mismatch:** Verify `COOKIE_DOMAIN` matches your site URL
+- **Mixed content:** Ensure your site uses HTTPS consistently
+- **Server caching:** Exclude `wp-login.php` and cookie-based sessions from page caching
+
+### Login Redirect Loop
+
+If the login page keeps reloading after entering credentials:
+
+1. Clear browser cookies for your site
+2. Check `wp-config.php` for correct `WP_HOME` and `WP_SITEURL` values
+3. Temporarily rename your `plugins` folder to rule out plugin conflicts
+
+### "Too many redirects"
+
+Often caused by conflicting site URL settings:
+
+```php
+// Add to wp-config.php to force correct URLs
+define( 'WP_HOME', 'https://example.com' );
+define( 'WP_SITEURL', 'https://example.com' );
+```
+
+## Resetting Your Password
+
+This section covers methods for resetting a WordPress password, from standard recovery to advanced technical approaches.
+
+## Standard Password Recovery
+
+If you forget your WordPress password, use the **Lost your password?** link on the login screen. WordPress will email a password reset link to the address associated with your account.
+
+This is the simplest and safest method when:
+- You have access to your account's email address
+- Your site's email functionality is working properly
+
+## Technical Password Reset Methods
+
+When standard recovery isn't available, administrators can reset passwords using the methods below. **WP-CLI is the recommended approach** as it's the safest and most straightforward.
+
+### Using WP-CLI (Recommended)
+
+WP-CLI provides a secure, command-line method for password resets without directly modifying database tables.
+
+**Set a specific password** using [`wp user update`](https://developer.wordpress.org/cli/commands/user/update/):
+
+```bash
+wp user update USERNAME --user_pass="new_password"
+```
+
+**Generate a new random password** using [`wp user reset-password`](https://developer.wordpress.org/cli/commands/user/reset-password/):
+
+```bash
+wp user reset-password USERNAME --show-password
+```
+
+This generates a new password and emails the user to notify them that their password was changed. The email does not include the new password. Admins can use the `--show-password` option to display the new password after it has been changed, if they need to share it with the user separately.
+
+See the [WP-CLI user command reference](https://developer.wordpress.org/cli/commands/user/) for additional options.
+
+### Using phpMyAdmin
+
+If you have database access through phpMyAdmin:
+
+1. Open phpMyAdmin and select your WordPress database
+2. Navigate to the `wp_users` table (your prefix may differ)
+3. Click **Edit** on the user row you want to modify
+4. In the `user_pass` field:
+   - Select **MD5** from the function dropdown
+   - Enter your new password in the value field
+5. Click **Go** to save
+
+### Using MySQL Command Line
+
+Connect to your database and run:
+
+```sql
+UPDATE wp_users 
+SET user_pass = MD5('new_password') 
+WHERE user_login = 'admin';
+```
+
+Replace `wp_users` with your actual table prefix, `new_password` with your desired password, and `admin` with the username.
+
+**Note:** The MD5 method works for initial login. WordPress will automatically rehash the password using a stronger algorithm on next login.
+
+## Additional Resources
+
+- [Official WordPress password recovery documentation](https://wordpress.org/documentation/article/reset-your-password/)
+- [WordPress Cookies](https://wordpress.org/support/article/cookies/) – Detailed explanation of cookies used by WordPress
+- [Editing wp-config.php](https://wordpress.org/support/article/editing-wp-config-php/) – Official guide on configuring constants
+- [Hardening WordPress](https://developer.wordpress.org/advanced-administration/security/hardening/) – Security best practices including strong passwords, HTTPS, and two-factor authentication