Poor login security

  • Resolved chrisadval1

    (@chrisadval1)


    1 year, 9 months ago

    The only way to log into my own website is to manually disable the wordfence. I whitelisted my ip so I don’t need to use 2FA (which did not work and prevented login)… but now it won’t let me login anyways claiming invalid password. This happens on all 7 of my wordpress websites, consistently. Please help me fix your very poor plugin.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support wfscott

    (@wfscott)

    Hello, @chrisadval1

    Sorry for the issues you’re seeing on the sites. This is very likely a plugin or theme conflict.

    Can you confirm if you’re logging in via the default /wp-admin login area on all sites? Also, are you using any other security plugins, login-related plugins, captchas, or anything related to the login flow across all sites?

    If you can, please send diagnostics from two of affected sites via Wordfence > Tools > Diagnostics > Send Report by Email. Send those to wftest @ wordfence dot com and put your forum username in the 2nd field there.

    Thanks,
    Scott

    Thread Starter chrisadval1

    (@chrisadval1)

    Sent the report from one of the sites out of 6. But I have the same issue after wordfence “forgets” who I am forces me to login again after 7 or so days, on same machine/ip/browser. Yes I use /wp-admin and /admin, backdoor from host works most of the time to bypass the error, they have a /wp-admin URL which just somehow works than me just typing in the URL into the browser requires me to login after 7 or so days.

    Other security plugins I use that are minor plugins in comparison to wordfence are Advanced Google reCAPTCHA and Jetpack for this 1 wordpress.

    Plugin Support wfscott

    (@wfscott)

    Thanks, @chrisadval1

    If you can, please try with both the Limit Login plugin and the Advanced Google captcha plugin disabled. Also, be sure you are not using our captcha (Wordfence > Tools > Login Security > Settings) and another captcha alongside one another on the login pages.

    Thanks,
    Scott

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Poor login security’ is closed to new replies.