All 31 Login Security answers

See every answer

Answer

I am locked out of my own site. What now?

Updated Login Security 1.6.0Tested with WordPress 7.1

Login Security gives you four ways back in, and none of them needs the admin screens. In the order they are quickest:

  1. The recovery link. If you copied it somewhere when you set the plugin up, open it. It trusts whatever address you are on for an hour, then sign in with your password as normal.
  2. A different connection. The lockout is per address, so a phone off wi-fi is usually a different address entirely.
  3. WP-CLI, if your host gives you a terminal: wp login-security unlock lifts every lockout on the site, including on hosts that keep them in an object cache such as Redis, and the count of failed attempts starts again.
  4. Wait. The first lockout is twenty minutes by default, and the screen tells you how long is left.

If you have none of those, your host's support can run the WP-CLI line or deactivate the plugin from the file manager: renaming its folder in wp-content/plugins/ switches it off and loses nothing.

Still stuck? Ask the developers who wrote it. We aim to reply within one business day.

Login Security

Stop the machines guessing at your passwords, and see exactly who has been trying.

From $19 a year · every feature · 30-day refund

Buy Login SecuritySee the plugin

The Login Security dashboard in WordPress admin. A green notice reads 1 lockout this week, and the site is fine: 13 attempts were refused, from 4 addresses. Four cards show 13 refused this week, 1 locked out, 4 addresses and 1 signed in. A panel headed You cannot be locked out lists the address you are on, that signed-in administrators are never locked out, and the sign-in page, with a Never lock out the address I am on now button. Below it, Usernames being tried shows admin tried 7 times, marked a real account and no second step.