Hi,
Currently, it is not possible to whitelist a user role, since the whitelist can only see which address the user is connecting from, and some of the rules need to check a visitor before they log in.
If you’re having trouble with valid users getting blocked though, do you know which message they see when they get blocked?
-Matt R
Hey Matt,
Under “Login Security Options” in the Options tab I a set “Lock out after how many login failures” to 5. However, people are being locked out only after the 1st attempt. They receive this message:
You are temporarily locked out
You have been temporarily locked out of this system. This means that you will not be able to sign-in or use several other features that may compromise security. Please try back in a short while.
• Return to the site home page
• Attempt to return to the admin login page (you may still be locked out)
If you are a site administrator and have been accidentally locked out, please enter your email in the box below and click “Send”. If the email address you enter belongs to a known site administrator or someone set to receive Wordfence alerts, we will send you an email to help you regain access. Please read this FAQ entry if this does not work.
Hi,
In that case, your site might be using a “reverse proxy”, which prevents Wordfence from seeing see the IP addresses of individual visitors. You can check if this is the case and adjust Wordfence’s options to match your host by following the instructions on this page:
Reverse Proxy Troubleshooting
If this doesn’t help, let me know what you’re seeing on Live Traffic, and also if you have alerts enabled for lockouts, check what reason is listed for the lockouts when they happen.
-Matt R
