Hello leemn,
The “Policy about adding new sites without authorization” option is disabled in the account associated with the site administrator’s email address, correct? If so, that is the reason for the “Forbidden. Invalid authorization data” response.
Regarding the “FW UPDATE INIT: KEY_IS_NOT_VALID” issue, please confirm whether the keys match: ‘keyreturned’, the one stored in the plugin, and the one displayed in the me@home.com account.
Thread Starter
leemn
(@leemn)
To answer your question – yes the keys match. I checked the key in the dashboard against the one used with the plugin and it’s the same.
Thank you for the confirmation. I will ask our developers about this. We will return to you within 1-3 business days.
One more thing, could you tell us your CleanTalk service ID?
Hello @leemn,
We’ve made some changes to our plugin. Please, use this instruction below to install the fixed version (the fix will be included in the further version):
Download link: https://github.com/CleanTalk/security-malware-firewall/releases/download/fix-version/security-malware-firewall.zip
- Go to the WordPress Administrator Panel —> Plugins.
- Find the plugin “Security by CleanTalk” —> Deactivate.
- After the automatic page refresh, find the plugin again “Security by CleanTalk” —> Delete. Confirm “Yes, delete these files”.
- Go to Plugins —> Add New —> Upload Plugin.
- Download the plugin archive from the link above.
- Choose the downloaded archive and press “Install Now”.
After that, please recheck this issue.
Please let us know the results.
Thread Starter
leemn
(@leemn)
Same issue below is the result. I compared the key returned with both the key used in the plugin and the portal and they are all the same. This is for Service #2245752
Message output after using wp spbc create –token=mytoken –domain=domain.com –email=me@home.com
Service creation start..
Redirect after activation disabled..
Trying get api key via WP_CLI utils..
Api key installed: y8u5apikey
Running synchronization process and SFW update init..
Error occurred while syncing:
\ArrayObject::__set_state(array(
‘firewall_update’ =>
array (
‘error’ => ‘FW UPDATE INIT: KEY_IS_NOT_VALID’,
‘error_time’ => 1782132194,
),
))
Service created successful.
I see this for the plugin on the website
2026-06-22 12:43:14: Updating firewall: “FW UPDATE INIT: KEY_IS_NOT_VALID”
I see this message in the portal for the website
Need setup / Setup Manual
Thank you for your reply.
I will ask our developers about this. We will return to you within 1-3 business days.
Please wait.
Thread Starter
leemn
(@leemn)
That version worked I did not see any error from the command. The keys match and the plugin appears to be fine.
The only thing I noticed was in the dashboard on the Cleantalk site it shows “Need Setup / Setup Manual”; however, everything else appears to be fine the access keys match and in the plugin I don’t see any errors. I tried a “sync to cloud” thinking that might clear the message in the portal/dashboard no luck. But the plugin appears to be working fine, so the message in the portal/dashboard might be something on the backend which needs to be set..
Thank you for your feedback. It appears that all websites are correctly set now. Please get in touch with us through our private Ticket System if you need any further assistance:
https://cleantalk.org/my/support/open
Thread Starter
leemn
(@leemn)
Thank you! Tell the support team I appreciate the quick response in solving this issue.