Wordfence intercepting password resets


*ex-WooCommerce customer: Customer no longer regsitered on website.

When an ex-WooCommerce customer attempts to reset their password and they do not see the expected ‘Invalid username or email’ notification message it can cause confusion as there is no way for the end user to know if the password reset request was successful.

Security plugins like Wordfence intercept password resets.


If you are using WordFence, to fix this, go to Firewall > Firewall Options > Additional Options and untick ‘Don’t let WordPress reveal valid users in login errors’.

That will now stop Wordfence from blocking the error notification and users will now be able to see the correct screen notification.

WordPress Maintenance from £25.99/month

Experience unparalleled WordPress support and maintenance with our exceptional service plans. Entrust us with all your WordPress needs, guaranteeing the seamless operation and upkeep of your website.

Get Started