Search plugins, docs and guides… Buy · from $19/yr Buy

Sell more

Protect and comply

Speed and delivery

Content and SEO

Launch and support

All 15 plugins Every plugin from $19 a year, or pay once from $49. Pricing Not sure which one? Search plugins, docs and answers
All 31 Login Security answers

See every answer

Answer

I got an email about a lockout. Is my site hacked?

Updated Login Security 1.6.0Tested with WordPress 7.1

Almost certainly not. A lockout email means somebody tried passwords and was stopped, which is the plugin working rather than something going wrong. Any site that has been online for a few weeks gets this.

It is worth a look when the username being tried is a real account here, or when the same address is back day after day. The email names the address the attempt came from and says why the lockout happened. When one username was tried from many addresses, the reason names that username, so check whether it is an account on your site. An address coming back shows from one day's email to the next, and the Who has tried screen has the rest while Record every attempt is on.

Still stuck? Ask the developers who wrote it. We aim to reply within one business day.

Login Security

Stop the machines guessing at your passwords, and see exactly who has been trying.

From $19 a year · every feature · 30-day refund

Buy Login SecuritySee the plugin

The Login Security dashboard in WordPress admin. A green notice reads 1 lockout this week, and the site is fine: 13 attempts were refused, from 4 addresses. Four cards show 13 refused this week, 1 locked out, 4 addresses and 1 signed in. A panel headed You cannot be locked out lists the address you are on, that signed-in administrators are never locked out, and the sign-in page, with a Never lock out the address I am on now button. Below it, Usernames being tried shows admin tried 7 times, marked a real account and no second step.