• Hi,

    I have an issue with the login verification email.

    As I read from previous topics, the turnaround is to set the reCAPTCHA human/bot threshold score under 0.4.

    Interestingly the score is set at 0.2 and also my ip is whitelisted to turn all the applicable rules and still somehow it does not let me login without the email verification process. Not to mention that with the first login click nothing happens and only the page reloads?

    I appreciate your help,

    Sayna

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @sayna, thank-you for reaching out.

    In terms of reCAPTCHA, we don’t receive information from Google about?why?a human may sometimes receive a low enough score to always require verification. Generally, a “reCAPTCHA human/bot threshold score” setting in?Wordfence > Login Security > Settings?of at least?0.7?should allow?most?humans through on your site without having to verify every time. Your lower value should certainly be more lenient by the sounds of things.

    Google reCAPTCHA v3?only?provides a score and nothing else, it doesn’t fall back to picking bicycles/traffic lights/etc., so the fallback email is our way of giving somebody a chance to sign in rather than always rejecting them. Please note that our reCAPTCHA and 2FA solutions are designed for the default WordPress and WooCommerce login/registration pages only. This means a score may always be 0 or not provided if you’re using a custom login page or one provided from another plugin that doesn’t send the score as part of the login form.

    A possible last-chance solution if you’re stuck with users getting low scores no matter what you try is visiting your?https://www.google.com/recaptcha/?admin and generate a new set of reCAPTCHA v3 keys. Replace the existing keys in Wordfence’s settings. This resets any history the site had accumulated that could result in constantly low scores, but?not?reset the score history chart in the Wordfence plugin.

    Many thanks,
    Peter.

    Thread Starter sayna

    (@sayna)

    Hi Peter,

    Thanks for the info,

    I have tried all the solutions provided and yes the login pages are wordpress default pages.

    Created new reCAPTCHA v3 keys, threshold ( score 0.5 ) and also created new site user just in case! Still not possible to log in without email verification.

    I also tried with VPN ( if any problem with my IP ) although it’s whitelisted in Wordfence setting.

    Interestingly when logging in with email verification and log out and try immediately to log in again still asks for email verification. So the previous score is not even considered/sorted for a minute?

    I’d like to know is it somehow possible to integrate reCAPTCHA v 2 (I’m not a robot” Checkbox,..)instead of v3 into Wordfence login? I’m not sure why I think maybe that’s the reason for this issue. It could has bugs in terms of smooth integration?!

    Or maybe some chaching problem with the Wordfence plugin?!

    It’s sad because we really like your plugin and find it so useful, but this issue does not look like normal at all, practically really few customers if any can log in due to this unnecessary step.

    Thanks again,

    Sayna

    Thread Starter sayna

    (@sayna)

    Hi,

    A quick update:

    I have totally uninstalled the plugin and cleaned the database via WP DB Cleaner plugin and reinstalled it.

    For now it seems that fixed the issue!

    Thanks

Viewing 3 replies - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.