Unable to login after installing Wordfence

  • Resolved gwidgery

    (@gwidgery)


    5 years, 6 months ago

    I have wordpress multisite installed. WordPress is hosted on a virtual machine with Google Cloud Platform. Able to log in no problem.

    After installing wordfence I log out and then try to log in again. I enter my credentials and hit login, but then nothing happens. The page doesn’t reload, and it doesn’t log me in. To regain access I have to SFTP in and rename the wordfence folder.

    I’ve also tried enabling 2FA, but that doesn’t allow me to login either. I get the message: VERIFICATION REQUIRED: Additional verification is required for login. Please check the email address associated with the account for a verification link.

    I get the email, click the login link and it takes me back to the login page, but doesn’t let me in.

    I’ve uninstalled and reinstalled the plugin several times and have also created a new user, which also ends up having the same exact issue.

    The page I need help with: [log in to see the link]

Viewing 6 replies - 1 through 6 (of 6 total)
  • Thread Starter gwidgery

    (@gwidgery)

    To add to this, after I’ve regained access to the site by manually turning off wordfence, I look at the logs, and it shows the login as a failed attempt (as if it’s the wrong password), not as a blocked attempt.

    Here’s my .htaccess file in case that might be causing the issue:

    # BEGIN WordPress

    RewriteEngine On
    RewriteBase /
    RewriteRule ^index\.php$ – [L]

    # add a trailing slash to /wp-admin
    RewriteRule ^([_0-9a-zA-Z-]+/)?wp-admin$ $1wp-admin/ [R=301,L]

    RewriteCond %{REQUEST_FILENAME} -f [OR]
    RewriteCond %{REQUEST_FILENAME} -d
    RewriteRule ^ – [L]
    RewriteRule ^([_0-9a-zA-Z-]+/)?(wp-(content|admin|includes).*) $2 [L]
    RewriteRule ^([_0-9a-zA-Z-]+/)?(.*\.php)$ $2 [L]
    RewriteRule . index.php [L]

    # END WordPress

    Hey @gwidgery,

    Thanks for the update, and happy to hear you were able to regain access to the site.

    Can you please check for a plugin conflict by disabling all other plugins? You can use the Health Check & Troubleshooting plugin to help with this. When it’s active the plugins will only be disabled for the logged in admin user.

    Please let me know how it goes.

    Thanks,

    Gerroald

    I’m having the same problem. When trying to log in, it is rejected with a warning: “VERIFICATION REQUIRED: Additional verification is required for login. Please check the email address associated with the account for a verification link.”

    Disabling reCAPTCHA on Wordfence / Login Security / Settings stops this from happening. I suspect it may be an issue with reCAPTCHA, unfortunately.

    I am having a similar login issue with tablets. Specifically, IOS tablet or phone, I am able to get through the username and password, but the CFA just hangs when I enter the recent code from Google Authenticator app I installed. I am experimenting with turning off other plugins and monitoring Healthcheck. I look forward to your updates.

    Help! I am also having this problem. When I try to login (as my admin account) the login screen gives the error

    Error: unexpected error
    At first, it gave
    Error: Invalid answer
    which I suspect means it did not like the recaptcha answer.

    The reCaptcha option is activated. I recently updated WordFence to the latest (as of a couple of days ago) version.

    By now, my IP has been blocked from logging in.

    I went in through cPanel/FileManager and renamed the plugins/wordfence folder to attempt to disable wordfence. This did not work; I am still locked out. WordFence seems to still be running?

    I need to know how to get into my dashboard and change the wordfence settings.

    • This reply was modified 5 years, 6 months ago by sybok. Reason: Clarify error message

    Hi All,

    This is going to be due to the new reCAPTCHA feature we released. Google has given your user a low score so it’s requiring extra verification. I wish I could tell you why this is, but it’s Google’s algorithm. If you either enable Two-Factor (recommended) or disable (not recommended) reCAPTCHA you will not see this.

    https://www.wordfence.com/help/login-security/#captcha-options

    Please let me know if this helps.

    Thanks,

    Gerroald

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Unable to login after installing Wordfence’ is closed to new replies.