Unable to login due to iThemes but reason is not clear

Hi @alamana, sorry for the delayed response!

The Security Check Pro can be found in Security > Settings > Features, and once this is enabled, you can go ahead to the Tools page and run the Security Check Pro tool to determine the correct way to identify the IPs that visit your site according to your server configuration. Also, the “Security Check Scan” option in Global Settings > IP Detection > Proxy Detection will only be available when Security Check Pro is enabled.

Additional information about Security Check Pro can be read here.

Hope this helps, and please let me know if you need further assistance.

Thanks for the help @shanedelierrr. Unfortunately the issue persists even with those settings.

I don’t think the problem has anything to do with lockouts, because when I disable the plugin, log in, and re-enable it there are never any lockouts in the list.

Is there anything else I can try? It seems like iThemes can’t work alongside Wordfence’s 2FA; at least that’s my guess as to the problem.

Thanks again!

Hello @shanedelierrr and @shalomt could you please advise on this? Otherwise I guess I will be uninstalling iThemes Security.

Thanks again for reading.

It seems like the problem might only affect logging in with a username – but logging in with an email seems to work. Is there some reason that might be based on the way things were coded in the plugin?

Thanks again!

Hi @alamana, I’m glad to hear that iThemes Security works alongside Wordfence’s 2FA when you log in with an email address!

Do you know if the issue persists when you switch to a WordPress version before 6.3? Can you also confirm that the “LOGIN WITH EMAIL ADDRESS OR USERNAME” in the iTSec WordPress Tweaks settings is set to “Email Address and Username”? Would it be possible for you to send screenshots/screen recording of your login process and how you encountered the issue?

I tried using both iThemes Security and Wordfence Login Security on one of my test sites, but I could log in just fine. On my test, I made sure that the iTSec 2FA was disabled and configured the reCAPTCHA v3 keys in the Wordfence settings. The iTSec encryption key also remained on my wp-config.php file throughout the test.

I look forward to hearing from you.

@shanedelierrr that appears to be the issue. We have it set to email-only. That never used to be a problem for us to login as an admin with username in the past. I guess perhaps iTSec fixed that feature recently and that led me to think something broke.

With that in mind, I think we can close this issue. Thank you for all of your help.

Hi,
I had the same problem.
I solved id by changing the Captcha provider from google to hCaptcha.
Now every thing seems to work normally.