I loaded your plugin last night and today get an error for my admin page

Hi! Do you remember, did you check

Block direct access to wp-login.php and return HTTP 404 Not Found Error

in the settings?

Yes, not sure I clicked those though.

There is no other way to get 404 error from my plugin. Do you still unable to log in?

Actually I had to go to my server for help to disable the program. I did look for instructions for what to do and not to do but couldn’t find it for the app. It looks like a really good program but want to be sure what NOT to do to lock myself out. I even had my IP in the whitelisted section so was a surprise when it locked me out.

So to be clear… I should or shouldn’t click the box for wp-login.php?

You may check box

Block direct access to wp-login.php and return HTTP 404 Not Found Error

only if you have particular URL or page to log in to the site. Other than default wp-login.php. That is mean you have entered some word in the Custom login URL field. I recommend you to enter whatever you want in the Custom login URL field and bookmarked it or just remember it. When you’ll have saved settings, you will get the notification by email also with URL. Use that URL to login to your site.
Whitelisting IP doesn’t help in this case because it intended to deal with brute force attacks. You didn’t locked out yourself. You just disabled using wp-login.php.
Check out some explanation here: https://wpcerber.com/recommended-security-settings/

Thank you for your time in explaining this, I will follow the instruction link, I believe I understand now. I didn’t provide a custom login address and when I clicked on the block direct access to wp-login it gave me the 404 error.

Please fill Custom login URL whatever you want and everything will be OK. Don’t forget to remember your new login URL.

Thank you, I saved the custom login URL I created and followed the sample… so far so good except (bet you hate to hear that) when I went to log out of my site it wouldn’t let me, said there is was an error with another plugin I have called “Nextend Facebook Connect” (actually there are 3 separate plugins by the same author (Nextend Google Connect & Nextend Twitter Connect). They allow page subscribers to login to my page under any of their personal accounts with Facebook, Google or Twitter. I deactivated them and was able to log out. I was wondering if you have run into this problem yet?

If it is choice of security or easy login for subscribers I have to take security with all the brute force attacks I’m receiving. Just thought I would run it by you in case you had an easy fix or might want to look into should someone else bring it up.

That’s good and interesting news. I’ll check plugins, you had mentioned, for compatibility issues. It take a while. I’ll let you know when I’m done.

I have checked Nextend Facebook Connect plugin. It’s not compatible with any security plugins that protects login page. I don’t recommend using plugin that kind.
First of all. Author use hard-coded “wp-login.php” in the nextend-facebook-connect.php file.

return site_url('wp-login.php') . '?loginFacebook=1';

Second, support topic of that plugin overflow with unresolved requests.

Thank you for letting me know, I’ll ditch those and look for something else, I was testing it having seen it on other sites but my major problem has been brute force attacks which I can say thankfully, due to your plugin has decreased dramatically. Thank you so much!

Thanks again, forgot to mark this as resolved. ??

Best wishes for your future! Feel free to ask me any help.