Locked out of account from entering correct 2FA code.

Hi @eugenecyates2023,

It’s possible for the email address registered for your administrative user to be different to the email that Wordfence alerts are sent to, so ensure you’re populating that box with your user’s email address if it differs from the Wordfence’s “Where to email alerts” one.

You can regain access to your site manually by following these steps:

• Please use FTP/SFTP — or any file manager your web host provides via their administration panel.
• Look inside the /wp-content/plugins/ directory and rename the wordfence directory to wordfence.bak. This will deactivate Wordfence and allow you to login without the 2FA code.
• Once you have logged in to your WordPress admin you can name the folder back to wordfence again.
• Go to your user profile and add 2FA back to your account, making sure to download the backup codes in case of problems in the future.

Let me know if you have further issues,
Peter.

It’s not allowing me to change the file name. Maybe because it’s in use? I can’t even delete it. It doesn’t give me the option.

Hi @eugenecyates2023,

You should be able to rename the wordfence folder in the filesystem of your site, even if a process had been active at the time. I would check-in with your host or server administrator just to ensure you have permission to make changes to the folders.

Peter.