You have been locked out for too many invalid login attempts.
“You have been locked out for too many invalid login attempts.” (Solid Security): causes and what to check
Solid Security, formerly iThemes Security, shows this message when one address or username reaches the limit of failed logins. The lockout lasts for the period set in the plugin, and an address that is locked out repeatedly can be banned.
Which of these do you see?
A browser, app or another device keeps trying the old password and triggers a new lockout each time.
Solid Security can lock a username as well as an address, so changing networks does not help.
Automated attempts against the same username used up the limit.
Common causes
References
Rather not fix it yourself? Let WP119 handle it automatically.
A corrupted roles table and a security plugin lockout are both within scope. These two items change site data directly: when the health check finds them, they are included in the quote, and before paying the recovery fee you confirm each one by checking its box in the Recovery Authorization Consent Form. Fixes are made on a copy of your site in the recovery station and written back only after re-verification passes. In your site’s database, the protected tables (members, comments, orders and form submissions) are copied as structure only. In SSH and FTP mode, the system creates a pre-recovery backup on your host before writing back and restores from it if verification after write-back fails. If the recovery cannot be completed, the recovery fee is refunded in full.
- Initial assessment: Site URL entry
- Copy to the recovery station: Work on a copy
- Diagnosis: Item-by-item checks
- Recovery and verification: Home and inner pages
- Write-back or delivery: Only after verification passes
Use WP119 when you are locked out of your own admin area and cannot reach the plugin’s settings to unblock yourself.
Check my site →