Title: False invalid usernames
Last modified: August 31, 2016

---

# False invalid usernames

 *  Resolved [wpcrank_phil](https://wordpress.org/support/users/wpcsphil/)
 * (@wpcsphil)
 * [9 years, 11 months ago](https://wordpress.org/support/topic/false-invalid-usernames/)
 * Hello,
 * I have a new client whose WordFence is blocking a lot of users for attempting
   to login with invalid usernames – but all the usernames actual exist. They have
   a custom registration system in an Modal with AJAX, maybe that would be part 
   of the problem?
 * Thanks much for any help!
 * Philip
 * [https://wordpress.org/plugins/wordfence/](https://wordpress.org/plugins/wordfence/)

Viewing 5 replies - 1 through 5 (of 5 total)

 *  [WFBrian](https://wordpress.org/support/users/wfbrian/)
 * (@wfbrian)
 * [9 years, 11 months ago](https://wordpress.org/support/topic/false-invalid-usernames/#post-7412364)
 * Hi Phillip,
 * That’s a definite possibility. Does the Modal/AJAX method add the users to the
   WordPress user database? The WordPress user DB is where Wordfence looks for existing
   users. Would it be possible to test by creating a new user via regular WordPress
   and see if the block happens with that user?
 * Thanks,
    Brian
 *  [mountainguy2](https://wordpress.org/support/users/mountainguy2/)
 * (@mountainguy2)
 * [9 years, 11 months ago](https://wordpress.org/support/topic/false-invalid-usernames/#post-7412432)
 * For what it’s worth, I have this problem for one user who uses Lastpass for automated
   login. His user name is in the DB, and is correct in Lastpass, but when he tries
   to use Lastpass it results in invalid user name and a Wordfence lockout. We’ve
   spent a few hours trying different things and nothing seems to fix this other
   than the user going back to manually entering his credentials. It’s been super
   frustrating.
 * So, is there a chance your users are trying to log in using a password manager?
 * MTN
 *  Thread Starter [wpcrank_phil](https://wordpress.org/support/users/wpcsphil/)
 * (@wpcsphil)
 * [9 years, 11 months ago](https://wordpress.org/support/topic/false-invalid-usernames/#post-7412467)
 * Thanks much for your help guys. I’m going to setup a duplicate site and see if
   I can figure it out more. Appreciate the pointers in some possible directions.
   I know I have pains with LastPass sometimes personally having to submit a couple
   times on WP logins.
 * Brian, the system does put them into the standard WP Users system / table. I’m
   wondering if it’s a caching plugin issue as well.
 * Thanks again, will keep digging!
 *  [mountainguy2](https://wordpress.org/support/users/mountainguy2/)
 * (@mountainguy2)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/false-invalid-usernames/#post-8713828)
 * Well, it’s 8 months later and we still have this problem with Wordfence. Sigh.
 *  [Stratosphere](https://wordpress.org/support/users/stratosphere/)
 * (@stratosphere)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/false-invalid-usernames/#post-8717879)
 * LastPass was hacked July, 2016. Must read: [https://www.hackread.com/lastpass-hacked-this-time-for-good/](https://www.hackread.com/lastpass-hacked-this-time-for-good/)
 * They say its hacked for good.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘False invalid usernames’ is closed to new replies.

 * ![](https://ps.w.org/wordfence/assets/icon.svg?rev=2070865)
 * [Wordfence Security - Firewall, Malware Scan, and Login Security](https://wordpress.org/plugins/wordfence/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wordfence/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wordfence/)
 * [Active Topics](https://wordpress.org/support/plugin/wordfence/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wordfence/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wordfence/reviews/)

## Tags

 * [false positive](https://wordpress.org/support/topic-tag/false-positive/)
 * [Invalid username](https://wordpress.org/support/topic-tag/invalid-username/)

 * 5 replies
 * 4 participants
 * Last reply from: [Stratosphere](https://wordpress.org/support/users/stratosphere/)
 * Last activity: [9 years, 3 months ago](https://wordpress.org/support/topic/false-invalid-usernames/#post-8717879)
 * Status: resolved