Activity reports (PRO)

Goal: get told about failed attempts without checking manually.

Steps

1. Go to Password Protected → Settings → Activity Report.
2. Turn on Send activity report by email.
3. Choose Frequency — Daily or Weekly.
4. Send to — leave blank to use your site’s admin email.
5. Save.

The screen then shows when the next report is scheduled.

What the email contains

• How many successful unlocks
• How many failed attempts
• The IP addresses responsible for the most failures
• A link back to your settings

Things worth knowing

• No email is sent for a quiet period, so this will not fill your inbox.
• It relies on WP-Cron. If your host has disabled it, reports will not send.
• Log entries are pruned automatically after 90 days.

Reading the results

A handful of failures is normal — people mistype. A large number from one IP address means someone is guessing, which is your cue to tighten the attempt limit or change the password.

Default: off. Frequency default: weekly.

The plugin records every unlock attempt — successes, failures and role bypasses — with the time, scope, IP address, signed-in user and browser.

The email summarises successful unlocks, failed attempts, and the IP addresses responsible for the most failures — which is how you notice someone guessing at your password.

No email is sent for a period with no activity, so a quiet site stays quiet.

The settings screen shows when the next report is scheduled. Log entries are pruned automatically after 90 days.

Activity Log Screen (PRO)

See every unlock attempt directly in the WordPress admin by going to Password Protected → Activity Log. You can filter by event type, page through history, and export logs to CSV.

Configurable Log Retention (PRO)

By default, log entries are kept for 90 days. In PRO, you can configure exactly how long logs are retained under the plugin settings.