ts91

Forum Replies Created

Viewing 1 replies (of 1 total)
  • Forum: Plugins
    In reply to: [Wordfence Security - Firewall, Malware Scan, and Login Security] Login loops back to login form, 2FA field never shown
    Thread Starter ts91

    (@ts91)

    2 weeks, 5 days ago

    Hi Peter, thanks a lot for your help!

    Update: Found it — a separate “Invisible reCaptcha” plugin was conflicting with Wordfence

    Just wanted to follow up in case anyone else runs into this. The cause was not Wordfence’s own reCAPTCHA option (that was already disabled) but a separate, third-party plugin called “Invisible reCaptcha” (by BerryPress, formerly Mihai Chelaru). Deactivating that plugin immediately fixed the login loop — login and 2FA now work every time.

    It looks like this plugin was also hooking into the login form validation and conflicting with Wordfence’s own session/2FA handling, which caused the login POST request to succeed (HTTP 200) without ever setting a proper session cookie — so the user got bounced back to the login form instead of reaching the 2FA step. Everything else I ruled out along the way (caching, IP blocks, NTP sync, username, credentials) turned out to be unrelated — the real culprit was this extra reCAPTCHA plugin conflicting with Wordfence.

    Thank you peter, and hope this helps someone with the same symptoms!

Viewing 1 replies (of 1 total)