Brute Force Protection

  • Resolved sakuwasan

    (@sakuwasan)


    3 years, 3 months ago

    Hi Wordfence support,

    What is the different between “Immediately lock out invalid usernames” and “Immediately block the IP of users who try to sign in as these usernames” ? Will they do the same task when login to WordPress.

    I tested that all the usernames added to “Immediately block the IP of users who try to sign in as these usernames” will lock out someone who try to login using those added usernames at once.

    And what are the conditions required to lock out users from “Immediately lock out invalid usernames” option. Do they have insert the correct password and an invalid username to go with this option.

    One of my blog site gets an user locked out messages continuously (once per hour) as someone is using a the same username with different IP addresses. If I add this same username someone who trying to login, to “Immediately block the IP of users who try to sign in as these usernames” will it help me to keep him away ?

    Thank you !

Viewing 1 replies (of 1 total)
  • Plugin Support wfphil

    (@wfphil)

    Hi @sakuwasan

    The option Immediately lock out invalid usernames simply means that any IP address that attempts to log in using a username that does not exist for any user account in WordPress then that IP address will be immediately blocked. It doesn’t matter if they enter a correct password or not.

    If any IP address tries to log in with a username that you have added to the option Immediately block the IP of users who try to sign in as these usernames then that IP address will be immediately blocked. You don’t want to add a username to this option for a genuine user account that exists in WordPress as they will be blocked when they try to log in.

    You can see our recommended settings in the link below:

    https://www.wordfence.com/help/firewall/brute-force/

Viewing 1 replies (of 1 total)
  • The topic ‘Brute Force Protection’ is closed to new replies.