All 31 Login Security answers

See every answer

Answer

A customer was told to check their email, but no reset email came

Updated Login Security 1.6.0Tested with WordPress 7.1

First check that what they typed is really an account. While Stop somebody after too many wrong passwords is on, the lost-password form answers a username or email address that is not an account as it answers a real one, on wp-login.php and on WooCommerce's My Account page: it says the email is on its way, and sends nothing. That is what stops a machine using the form to sort its list into your real customers and the rest, and it means a customer who mistyped their address is told the same thing.

Look them up under Users → All Users. If they have an account, send them a reset from there, and if that does not arrive either, the email may be in their spam folder or your site may not be sending email at all.

Still stuck? Ask the developers who wrote it. We aim to reply within one business day.

Login Security

Stop the machines guessing at your passwords, and see exactly who has been trying.

From $19 a year · every feature · 30-day refund

Buy Login SecuritySee the plugin

The Login Security dashboard in WordPress admin. A green notice reads 1 lockout this week, and the site is fine: 13 attempts were refused, from 4 addresses. Four cards show 13 refused this week, 1 locked out, 4 addresses and 1 signed in. A panel headed You cannot be locked out lists the address you are on, that signed-in administrators are never locked out, and the sign-in page, with a Never lock out the address I am on now button. Below it, Usernames being tried shows admin tried 7 times, marked a real account and no second step.