Someone trying to get in

• 

  natbaugh418 · Member · Jan 4, 2021 at 5:10 pm

  • Copy link
  • Add topic to favorites

  I get emails daily of ’16 failed attempts’ to (email visible only to moderators and staff)

• 

  staartmees · Member · Jan 4, 2021 at 5:15 pm

  • Copy link

  So make sure you have a really strong password and activate Two Step Authentication to protect your site

• 

  kokkieh · Staff · Jan 5, 2021 at 7:23 am

  • Copy link

  Hi there,

  Those emails aren’t coming from us. They’re coming from your self-hosted WordPress installation on the site, https://nataliebaugh.com.

  You can find general guidelines on improving the security of your self-hosted WordPress site at https://wordpress.org/support/article/hardening-wordpress/, and you can ask for more advice from the WordPress.org community at https://wordpress.org/support/forums/

  But ultimately, there’s no way to prevent someone who knows your email from using it to request a password reset without completely disabling the password reset feature on your site. So your best defence here is to make sure your email account has a strong password and has two-step authentication enabled, and then you can also install a two-step authentication plugin on your site to add that feature to your admin login as well as an extra layer of security.