Title: ts91's Replies | WordPress.org

---

# ts91

  [  ](https://wordpress.org/support/users/ts91/)

 *   [Profile](https://wordpress.org/support/users/ts91/)
 *   [Topics Started](https://wordpress.org/support/users/ts91/topics/)
 *   [Replies Created](https://wordpress.org/support/users/ts91/replies/)
 *   [Reviews Written](https://wordpress.org/support/users/ts91/reviews/)
 *   [Topics Replied To](https://wordpress.org/support/users/ts91/replied-to/)
 *   [Engagements](https://wordpress.org/support/users/ts91/engagements/)
 *   [Favorites](https://wordpress.org/support/users/ts91/favorites/)

 Search replies:

## Forum Replies Created

Viewing 1 replies (of 1 total)

 *   Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/)
    In
   reply to: [[Wordfence Security - Firewall, Malware Scan, and Login Security] Login loops back to login form, 2FA field never shown](https://wordpress.org/support/topic/login-loops-back-to-login-form-2fa-field-never-shown/)
 *  Thread Starter [ts91](https://wordpress.org/support/users/ts91/)
 * (@ts91)
 * [2 weeks, 5 days ago](https://wordpress.org/support/topic/login-loops-back-to-login-form-2fa-field-never-shown/#post-19000147)
 * Hi Peter, thanks a lot for your help!
 * **Update: Found it — a separate “Invisible reCaptcha” plugin was conflicting 
   with Wordfence**
 * Just wanted to follow up in case anyone else runs into this. The cause was not
   Wordfence’s own reCAPTCHA option (that was already disabled) but a separate, 
   third-party plugin called “Invisible reCaptcha” (by BerryPress, formerly Mihai
   Chelaru). Deactivating that plugin immediately fixed the login loop — login and
   2FA now work every time.
 * It looks like this plugin was also hooking into the login form validation and
   conflicting with Wordfence’s own session/2FA handling, which caused the login
   POST request to succeed (HTTP 200) without ever setting a proper session cookie—
   so the user got bounced back to the login form instead of reaching the 2FA step.
   Everything else I ruled out along the way (caching, IP blocks, NTP sync, username,
   credentials) turned out to be unrelated — the real culprit was this extra reCAPTCHA
   plugin conflicting with Wordfence.
 * Thank you peter, and hope this helps someone with the same symptoms!

Viewing 1 replies (of 1 total)