If you can still access the WordPress dashboard (or if you are helping a locked-out user while logged in as a different administrator), this is the easiest method.
If you’re using Wordfence’s module with reCAPTCHA or 2FA, a user might not be blocked—they might just be failing verification. In that case, ask them to clear browser cookies or reset their 2FA via Wordfence > Login Security > Settings > 2FA > Reset for a user .
This deactivates the plugin. You should now be able to log into your WordPress admin dashboard.
To stop this from happening again, consider tweaking these settings under :