All 31 Login Security answers
Answer
Somebody is trying my real username. Should I worry?
That is exactly what the first screen is for, and it is worth acting on. If a username that exists on your site is being worked on, the lockouts are doing their job but the password is now the only thing in the way. When that account has no second step, the row says so, and Send a password reset beside it emails the person a link to choose a new password.
Change that account's password to something long and unique today. Renaming the account is also worth doing — WordPress shows author names publicly, and on many sites the username is the author name.
Still stuck? Ask the developers who wrote it. We aim to reply within one business day.
Login Security
Stop the machines guessing at your passwords, and see exactly who has been trying.
From $19 a year · every feature · 30-day refund
