Wordfence Blocking Admin login

  • Resolved Morphy99

    (@morphy99)


    1 year, 3 months ago

    First off, there are several topics with the same issue and I commented on them to say I was also experiencing the same issue. For some reason the support moderator has deleted my posts. Surely this is creating more work for devs with so many topics for the same issue??

    Back to my issue and others. I was unable to login to my website admin due to there being an issue with recaptcha and Wordfence blocking this. I kept getting “CAPTCHA EXPIRED: The CAPTCHA verification for this login attempt has expired. Please try again.” And emails sent saying “The request was flagged as suspicious, and we need verification that you attempted to log in to allow it to proceed. This verification link will be valid for 15 minutes from the time it was sent. If you did not attempt this login, please change your password immediately.”

    Clicking the link in the email did nothing as I was still unable to login. Eventually I had to log in to the server by SSH and deactivate Wordfence completely. It’s now enabled again and I can log in but will this happen again as it’s lost 2 hours of my day trying to learn how to do all this!

Viewing 8 replies - 1 through 8 (of 8 total)
  • Uncle Tom

    (@notyouruncle)

    1 year, 3 months ago

    are you by chance using a password manager?

    jonbruce

    (@jonbruce)

    1 year, 3 months ago

    I have found this happened on one of my installs, but not others. Disabling catcha for now has helped.

    Thread Starter Morphy99

    (@morphy99)

    1 year, 3 months ago

    are you by chance using a password manager?

    No I don’t. This has nothing to do with the password, I’ve got 2FA enabled, the password was accepted and so was the 2FA code.

    Uncle Tom

    (@notyouruncle)

    1 year, 3 months ago

    Password managers can sometimes interfere with CAPTCHA challenges when autofill is enabled.

    Plugin Support wfpeter

    (@wfpeter)

    1 year, 3 months ago

    Hi @morphy99, thanks for getting in touch.

    We can’t modify posts, split threads, or delete posts from forum users, but it has generally been the case that we can’t assume a similar problem has the same cause so they’re easier to deal with independently. We appreciate you taking the time to open this up.

    We have had a slightly elevated number of questions around some of Google’s reCAPTCHA changes in the last week, although not from all customers who would have activated CAPTCHA through Login Security. For this reason, there may be caching or other specific factors that are only affecting a smaller number. It’d be great if we could see a site diagnostic that might help us get a clearer picture of the environment, other installed plugins etc.

    Visit the Wordfence > Tools > Diagnostics page to send the output to us at wftest @ wordfence . com. Click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

    NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

    Many thanks,
    Peter.

    hero2

    (@hero2)

    1 year, 2 months ago

    Why is this tread marked ‘Resolved’, when there is no answer to what to do about not being able to login to WordPress because of the meaningless message “CAPTCHA EXPIRED: The CAPTCHA verification for this login attempt has expired. Please try again.”?!?

    And how would I go to “Wordfence > Tools > Diagnostics” when I cannot login to my website??

    I am increasingly shocked by how impossible WordPress is.

    hero2

    (@hero2)

    1 year, 2 months ago

    OK… Renaming “/public_html/wp-content/plugins/wordfence” makes it possible to login and then rename it back again. Then I chose “Wordfence > Tools > Diagnostics” and “Send Report by Email“.

    As you can see in that report, I disabled “W3 Total Cache”. That didn’t help.

    I have also deactivated “Two-Factor Authentication” under Wordfence -> Login Security. That didn’t solve the “CAPTCHA EXPIRED: The CAPTCHA verification for this login attempt has expired. Please try again.”-problem either.

    Thread Starter Morphy99

    (@morphy99)

    1 year, 2 months ago

    Have you tried resetting the cache in your browser? I disabled the wordfence plugin via SSH and the the command wp plugin deactivate wordfence

Viewing 8 replies - 1 through 8 (of 8 total)

The topic ‘Wordfence Blocking Admin login’ is closed to new replies.