Hi @johannes747, thanks for reaching out.
The “VERIFICATION REQUIRED” messages and emails are related to the message Google will send back when the user fails to be confirmed as human by reCAPTCHA checks. By “activated an option to verify each login attempt”, is that reCAPTCHA itself or another setting?
We don’t receive information from Google about why a human may sometimes receive a low enough score to require verification. Generally, a “reCAPTCHA human/bot threshold score” setting in Wordfence > Login Security > Settings of at least 0.7 should allow most humans through on your site without having to verify every time.
Now that you’ve stopped receiving emails, it could be an issue with plugin/theme conflicts introduced since a version update. Double-check the browser console for red errors that might hint at issues with the reCAPTCHA or other code on this page. If our scripts don’t load properly due to an error earlier in the loading process, this is the most common cause of behavior such as this.
Our Login Security module’s 2FA/reCAPTCHA features are only compatible with WordPress and WooCommerce’s default registration/login pages so custom pop-up modals and forms can cause this kind of response also if you think anything might have changed there in terms of your theme or how customers/admins log in.
If you’re still unable to verify at all, you can rename the /wp-content/plugins/wordfence plugin folder to “wordfence_bak”. This should let you access and log into your site normally. You can then rename the folder back to “wordfence” to run some tests. The best way to test is to run Wordfence as your only enabled plugin and also reverting to a default theme such as Twenty Twenty-Three. If users are able to log in/verify, then reenable your plugins and theme one-by-one until it breaks again to help find the cause.
Thanks,
Peter.