Hi @rostichep,
Thanks for reaching out to us, and we appreciate the feedback.
Getting locked out of your site can definitely nightmare-ish especially when the usual methods of regaining access aren’t working. That said, what you’ve described is Solid Security doing exactly what it’s designed to do: prevent unauthorized access to your WP admin area.
To clarify, getting locked out is not permanent, and there are ways to regain access. By default, a normal Solid Security Site Lockout only lasts for 15 minutes, so after that, the admin user (assuming they have the correct credentials) should be able to log into the site again. When the same user triggers multiple site lockouts, that’s the time the plugin adds them to the Ban List — which is still reversible by simply removing the ban for their IP. For more details on the different ways you can release a lockout, you may view our guide here: https://solidwp.com/documentation/security/how-it-works/releasing-lockouts-in-solid-security/.
In case you’ll experience this behavior again in the future, and the methods from our guide did not help, the quickest way back in is to temporarily disable the plugin via (S)FTP or your hosting file manager and rename the plugin folder to deactivate it.
That said, if you’re still locked out after deleting the plugin and clearing database entries, something else may be interfering — and we’d love to help figure that out.
Let us know if you have further questions, and we’re always happy to help if you want to give Solid Security another try!