Locked out
Regain access when Login Protection blocks your IP or user.
From another admin session
If you still have an admin browser open:
- Go to Stalza Security → Login.
- Unlock the IP or username.
- Add your office / home IP to the allowlist if it is stable.
From the database / WP-CLI
If you are fully locked out, temporarily disable Login Protection:
-- Option name may vary by install; inspect with:
-- SELECT option_name FROM wp_options WHERE option_name LIKE 'stalza%';
Or remove the plugin folder via SFTP (wp-content/plugins/stalza-security), log in, then restore the plugin and adjust allowlists before re-enabling protection.
Prevention
- Allowlist static office IPs.
- Prefer application passwords / SSO over sharing one admin password.
- Do not lower lockout thresholds on sites behind CGNAT without allowlisting.