All 31 Login Security answers

See every answer

Answer

A customer who was locked out cannot get a password reset email

Updated Login Security 1.6.0Tested with WordPress 7.1

Their address is locked out for guessing: somebody there typed the wrong password too many times. While Limit password reset emails is on, the lost-password form tells that address the same thing the sign-in form does, Too many sign-in attempts from here, with how long is left. Signing in is refused to that address for exactly that long whatever password is typed, so a new password would not get them in any sooner.

To let them in now, press Let in on their row in Who has tried. That lifts the lockout and starts the reset count again for that address, and they can ask for their email straight away.

If the same account keeps being asked about, it is a real username somebody has found, and it is worth checking that account has a long password and a second step.

Still stuck? Ask the developers who wrote it. We aim to reply within one business day.

Login Security

Stop the machines guessing at your passwords, and see exactly who has been trying.

From $19 a year · every feature · 30-day refund

Buy Login SecuritySee the plugin

The Login Security dashboard in WordPress admin. A green notice reads 1 lockout this week, and the site is fine: 13 attempts were refused, from 4 addresses. Four cards show 13 refused this week, 1 locked out, 4 addresses and 1 signed in. A panel headed You cannot be locked out lists the address you are on, that signed-in administrators are never locked out, and the sign-in page, with a Never lock out the address I am on now button. Below it, Usernames being tried shows admin tried 7 times, marked a real account and no second step.