The secret access URL (also called the secret access link) is your backup if you get locked out by the firewall, login protection, or two-factor authentication (2FA).
Visiting the URL whitelists your current IP so you can reach the site again. If 2FA is blocking you, it also temporarily deactivates 2FA so you can fix your settings.
Locked out right now? See How to get back into your website and Restore access without the unblock URL.
When you enable the firewall
When you turn on the firewall, Security Ninja shows a popup with the secret access URL and a field to email it to yourself.
After a short wait (about 3 seconds), the Close button enables so you can continue configuring the firewall.
An email is also sent to the site admin address by default (subject similar to “Security Ninja Firewall secret access link”), even if you skip the popup email field.
Using the secret access URL
- Find the email with subject “Security Ninja Firewall secret access link,” or the URL you saved from the enable popup.
- Copy the URL and open it in your browser.
- Your current IP is whitelisted so you can log in again.
- If 2FA caused the lockout, 2FA is temporarily deactivated so you can reach wp-admin and fix your 2FA settings.
Keep it safe
- Do not share the URL. Anyone who visits it can whitelist their IP (and temporarily bypass 2FA).
- Store it offline or in a password manager, not only in a mailbox you might lose.
- The secret access URL is not included when you import/export settings, save it per site.
