• I need to disable WordFence from sending out these emails:

    Login Verification Required

    Please verify a login attempt for your account on PinnacleONE.

    Request Time: May 5, 2020 11:54:11 AM
    IP: [REDACTED]

    The request was flagged as suspicious, and we need verification that you attempted to log in to allow it to proceed. This verification link will be valid for 15 minutes from the time it was sent. If you did not attempt this login, please change your password immediately.

    You may bypass this verification step permanently by enabling two-factor authentication on your account.

    Verify and Log In

    I’ve looked in the Login Security options and I can’t see a way to turn these off.

    The email says, “You may bypass this verification step permanently by enabling two-factor authentication on your account” but there is *no way* I can force 2FA on 1,550 users who struggle to use a computer in the first place.

    Help?

    The page I need help with: [log in to see the link]

Viewing 15 replies - 1 through 15 (of 19 total)
  • Hi @joeldjones,

    Verification emails are sent when Google Recaptcha believes that the login was automated by a robot. You can disable verification emails by setting the threshold for these emails to be 1.0 definitely a human

    1. Go to Wordfence -> Login Security
    2. Set reCAPTCHA human/bot threshold score to 1.0

    For example: https://i.imgur.com/xkDdMz7.png

    Dave

    Thread Starter Joel Jones

    (@joeldjones)

    I’ve followed your directions – but based on the description, that “anything lower” than the score (1.0) will require additional login information – won’t that actually mean that EVERYONE will get a verification email now? (Take a look at the site’s threshold score)

    PinnacleONE reCAPTCHA Threshold Score

    i have the same problem! how you have resolve?

    Same problem on mi webpage…

    Same issue here, my users are old and fear tech. The only remedy is to disable WordFence which I am not happy about…. Any news?

    In Wordfence, if you disable Google reCaptcha, in the Login Security Settings, it no longer require the Email Verification.

    You should look for other login security measures, though. Try IP restrictions, if you know who and where are the users or admins.

    I have the same issue for some users which always get this message. Not sure why google thinks they are a robot. Would be nice if you set the threshold to e.g. 0.5 the mails would only be send when the users are below this value.
    Hopefully there will be an option or system to prevent these emails (or manually for some users).
    Hope it will be resolved soon

    Hey,

    I have the same issue. Did anyone discover a solution?

    Kind Regards

    I’ve enabled reCAPTCHA on login and registrations pages for a while on a network-enabled Wordfence, and it works well everywhere else, but now I’m getting this problem (Login Verification Required) on a WooCommerce site on the network.

    1. I confirm that disabling reCAPTCHA in Wordfence > Login Security > Settings (or running reCAPTCHA in test mode) apparently solves the problem on the WooCommerce site.

    But it sound a bit foolish to disable security on the entire network for a single site. Yet, I need this site to work properly.

    My intuition is that reCAPTCHA fails on the WooCommerce login page simply because Wordfence fails to integrate the reCAPTCHA field to it.

    In Wordfence documentation about Login Security Options (here), we can read this:

    Enable WooCommerce integration
    Enable this checkbox if you are using WooCommerce and would like Wordfence Login Security features such as the reCAPTCHA and 2FA to work on the WooCommerce Account page. We recommend testing your login pages after enabling this option, to be sure there are no conflicts with other plugins that modify the login page.

    But I can’t find this option anywhere. Does WooCommerce need to be network enabled for this option to show up? Heck, let’s try it! So I just enabled WooCommerce network-wide, just to see, and reloaded the Login Security page. No options shows up, but a little tiny warning message:

    We’ve detected that you’re using WooCommerce. reCAPTCHA support is currently incompatible with the WooCommerce login page and should not be enabled. Support may be added in a future version.

    Not very helpful. But that sort of confirms my initial assumption.

    So, now what? Can we disable reCAPTCHA verification on a single site? Or am I damned to disable it on the entire network?

    Any insight welcome.

    Hi @biguenique ,

    Thanks for this insight. I didn’t know about this info (https://www.wordfence.com/help/login-security/)
    and checked if for some reason (or unknown update) I also got the toggle switch. But unfortunately no.

    it gives me the same warning as before:

    We’ve detected that you’re using WooCommerce. reCAPTCHA support is currently incompatible with the WooCommerce login page and should not be enabled. Support may be added in a future version.

    Hoping this will be resolved soon.

    Any update on this issue?

    All options within a plugin should be accessible & configurable via the user interface.
    There should be an option on this page of a install to switch it on/off:

    https:// <insert-domain-name> /wp-admin/admin.php?page=WFLS#top#settings

    Thanks

    I think this thread is dead, I will open a new one.

    The only way to solve this is to disable recaptcha on the forms in the wordfence>login security>settings. But there wont be any defence against bots.

    Hey @joeldjones , did changing it to (1.0) work for you?

    I’ve done the same to my site but I agree with your scepticism, changing it to (1.0) looks like a sure-fire way to make it worse.

    This sucks, I’m even getting abuse complaints from Amazon SES because my users are bombarded with these emails. Going to pull Wordfence from my site as there is no way to disable this in a sane way.

Viewing 15 replies - 1 through 15 (of 19 total)
  • The topic ‘Disable “Login Verification Required” emails’ is closed to new replies.