Jelena

Hi,

We’re happy to hear that you love Shield! 🙂

Regarding the problem you’re having, sorry to hear that…

Renaming the login wont affect emails.

Shield never “intercepts” emails or blocks them in any way. It does log them, however, so you should be able to see whether the email for lost passwords are actually be sent using Shield’s Audit Trail.

This is the first thing to check. If they’re not being logged in the Audit Trail, then the actual process of lost password sending is being interrupted.

The next thing then is to assess your email deliverability on your WordPress site – are you using a dedicated and properly configured email system? This is a real problem for many on WordPress due to a lack of understanding around WordPress and emails. Setting up a dedicated email services like Postmark is critical:
https://getshieldsecurity.com/blog/postmark-preferred-transactional-email/

Perhaps have a read here as well to see: https://getshieldsecurity.com/blog/wordpress-email-deliverability/

Hope this was helpful for you in some way…

Regards,

Jelena

Hi,

Do you have Antibot Detection enabled in the Login Guard?

If yes, please note that this completely removes the need for login form CAPTCHAs, and Shield’s own GASP “I’m a human” checkbox. We’re passively testing a visitor’s status (no direct interaction required from the visitor), and we build their Bot Score and allow or deny the request.

​This system is best explained in our release blog posts here:
https://getshieldsecurity.com/blog/wordpress-anti-bot-detection-engine/
​
So, when you turn this on, GASP and Captcha will be automatically disabled. This means that the Antibot System takes over bot detection.

If you don’t want to use Antibot system for login/registration forms, you can disable it and then enable Recaptcha.

https://www.screencast.com/t/EUXJXwtH

Let us know if this was helpful for you.

Thanks,

Jelena

Hi,

Whenever you get locked out as the result of Shield, you can use a forceoff method outlined in this guide here:
https://support.getshieldsecurity.com/support/solutions/articles/3000000959

This will keep plugin active allowing you to get back in and change settings (i.e. remove your new created login url).

Regarding the problem you described, are you using page cache plugin/system?

Often caching can cause problems if it’s misconfigured or the cache is stale.

Our suggestion if you’re going to use Caching – if anything ever stops working disable and clear your caches and then check functionality. If it’s working again, try re-enabling your cache.

You can read a bit more about this approach here:
https://onedollarplugin.com/blog/5-golden-rules-wordpress-site-optimisation/

As you also mentioned an issue with brute force attempts, maybe this can help:
https://getshieldsecurity.com/blog/shield-wordpress-brute-force-ddos/

Also, you may want to read about our Antibot Detection Engine here:
https://getshieldsecurity.com/blog/wordpress-anti-bot-detection-engine/

Hope this was helpful for you in some way.

Thanks and have a nice Sunday.

Jelena

Hi,

Just to express our sincere gratitude to you for reporting this problem and for being so very cooperative to help us to investigate it. The extra effort you put into this was really appreciated. We simply cannot thank you enough for that! 🙂

To anyone reading this, know that the problem isn’t caused by Shield. Closing this thread…

Thank you so much for this great 5-star review! 🙂

Cheers!

Hi Christoph,

This error suggests that you haven’t added the domain name of your site into your reCAPTCHA dashboard for those particular set of keys. You must specify a list of domains for each set of reCAPTCHA keys. And then, use these keys in Shield.

This is what you can do:

1) Activate Shield and then use a forceoff method to get back into your site. To do this, please follow the steps outlined in this guide here:
https://support.getshieldsecurity.com/support/solutions/articles/3000000959
This will keep plugin active allowing you to get back in and change Recaptcha settings.

2) Then, you can go to the General Settings and deactivate Recaptcha by removing Recaptcha keys => save settings.

If you’d like to use Recaptcha, you can resolve the error. In this help article we explain how to configure Recaptcha properly in Shield and how to solve the error you’re getting:
https://support.getshieldsecurity.com/support/solutions/articles/3000072659

Hope this helps.

Let us know how you get on.

Thanks.

Jelena

Hi,

Sorry to hear that.

Can you try the following, please:

1) Check your Audit trail to see if Shield is blocking anything

2) Use forceoff method to keep Shield active and retest to see if it still happens.

Let us know how it went.

Thanks.

Hi,

Thanks for your question.

We’ve added support for WordPress 5.6’s new Application Passwords feature in the latest Shield release 10.1.5.

In this blog post, we explain what it is, whether there are any security risks, and how Shield has been adapted:
https://onedollarplugin.com/blog/wordpress-application-passwords

Hope this helps.

Jelena