How to Tell if a Website Is Built on WordPress (5 Ways)

You land on a site with a layout you love, or a competitor you want to size up, and one question follows: is this WordPress? Knowing how to tell if a website is built on WordPress takes about ten seconds once you know where to look, and it opens the door to finding the exact theme and plugins behind the design. This guide walks through five reliable checks you can run by hand, plus a one-click WordPress theme detector for when you want the answer without digging through code.

How do I tell if a website is built on WordPress?

Open the page source and search for the text wp-content or wp-includes. If either appears in the file paths, the site is almost certainly WordPress. You can confirm it in seconds by visiting /wp-login.php, checking the generator meta tag, or opening /wp-json, and each extra signal that matches makes the answer more certain.

That is the short version. Below are the five checks in order of speed, so you can stop at the first one that gives you a clear yes.

Method 1: Search the page source for wp-content

This is the most reliable manual check. WordPress serves themes and uploaded files from a folder called /wp-content/, and its core files sit in /wp-includes/. Almost every WordPress page leaks these paths in its HTML.

1. Open the website in your browser.
2. Right click an empty area and choose View Page Source, or press Ctrl+U on Windows or Cmd+Option+U on Mac.
3. Press Ctrl+F or Cmd+F and search for wp-content.
4. If you see paths like /wp-content/themes/ or /wp-content/plugins/, the site runs WordPress.

Here is the thing: this works even when the homepage looks nothing like a typical WordPress blog, because the folder structure stays the same no matter how custom the design is.

Method 2: Try /wp-login.php and /wp-admin

Every standard WordPress install has a login page at the same address. Add /wp-login.php to the end of the domain, for example example.com/wp-login.php. If the WordPress login screen appears, you have your answer. Visiting /wp-admin does the same thing, since it redirects logged-out visitors to that login page.

Keep in mind that security-conscious owners often rename or hide the login URL, so a missing login page is not proof the site avoids WordPress. Treat this as a strong yes when it works, not a no when it fails.

Method 3: Check the generator meta tag

WordPress adds a line to the page head that names itself. In the page source, search for generator. On a WordPress site you will often find <meta name="generator" content="WordPress 6.x">, which also reveals the exact version. Many sites strip this tag for security, so use it as a bonus confirmation rather than your only test.

Method 4: Open /wp-json and /readme.html

Modern WordPress ships with a REST API. Add /wp-json/ to the domain, and if the site returns a page of structured JSON describing routes and namespaces, that is a clear WordPress fingerprint. You can read more about it in the official WordPress REST API documentation.

Older or less hardened installs also keep /readme.html and /license.txt in the root. If either loads and mentions WordPress, the site is running it. Newer setups remove these files, so a blank result here means nothing on its own.

WordPress detection signals at a glance

The no-code way: use a WordPress detector tool

If you would rather skip the manual checks, paste the address into a detector. The free Pixellize WordPress theme detector runs every one of the signals above at once and returns a plain yes or no, then goes further and names the theme, its version and author, any child theme, and the active plugins it can see. It runs in your browser with no signup, which is why it is the fastest way to tell if a website is built on WordPress and see what powers it.

How can you tell what platform a website uses?

Check the page source for platform fingerprints: wp-content means WordPress, cdn.shopify.com means Shopify, and wix.com static hosts mean Wix. The generator meta tag names many platforms directly. A browser extension like Wappalyzer, or a detector tool, reads these same signals and labels the platform for you in one click.

WordPress powers roughly 43 percent of the web according to W3Techs, so when a site is not obviously Shopify or Wix, WordPress is the safe first guess. That single fact makes the wp-content check the smartest one to run first.

Why some WordPress sites are hard to detect

No detection method is 100 percent, and it helps to know why a real WordPress site can look invisible:

• Security plugins rename the login page, remove the generator tag, and block /readme.html.
• Headless WordPress uses WordPress only for the content, while a separate front end serves the pages, so wp-content may never appear.
• Aggressive caching and optimization can rewrite asset paths, though wp-content usually still shows somewhere.
• Full-site CDNs proxy the files and can mask a few clues, but rarely all of them at once.

This is exactly why you check several signals instead of one. If four checks come back empty, the site is probably not WordPress. If even one is a clear match, it almost always is.

Once you know it is WordPress, find the theme and plugins

Confirming the platform is step one. The useful part is usually what comes next: which theme created that layout and which plugins add the features. The stylesheet at /wp-content/themes/<name>/style.css holds the theme name, version, and author in its header comment. For a faster route, our guide on how to find the WordPress theme a website is using walks through it, and the Pixellize theme detector pulls the same details automatically, including the child theme and parent theme split that trips up most tools. If you also want to audit a page you already own, the meta tags analyzer is a handy companion.

Common mistakes to avoid

• Treating a missing /wp-login.php as proof the site is not WordPress. It often just means the login was moved.
• Relying only on the generator tag, which is one of the first things security plugins remove.
• Assuming a custom design rules out WordPress. Some of the most custom sites on the web run on it.
• Confusing WordPress.com hosting with self-hosted WordPress. Both are WordPress, they just differ in control.

Final word

Learning how to tell if a website is built on WordPress comes down to a handful of quick checks: search the source for wp-content, try the login page, read the generator tag, and open /wp-json. Any one match is a strong signal, and together they are close to proof. That is really all there is to how to tell if a website is built on WordPress by hand. When you want the answer plus the theme and plugins in a single step, let the Pixellize detector do the reading for you. Pixellize keeps every one of these checks free and in your browser, so you spend your time on what you found, not on how you found it.