The secret access URL (also called the secret access link) is your backup if the firewall, login protection, or 2FA locks you out.
Visiting the URL whitelists your current IP so you can reach the site again. If 2FA is blocking you, it also temporarily deactivates 2FA so you can fix your settings.
Locked out right now? See How to get back into your website and Restore access without the unblock URL.
When you enable the firewall
When you turn on Cloud Firewall, Security Ninja shows a popup with the secret access URL and a field to email it to yourself.
After a short wait (about 3 seconds), Close enables so you can continue configuring the firewall.
An email is also sent to the site admin address by default (subject similar to “Security Ninja Firewall secret access link”), even if you skip the popup email field.
Using the secret access URL
- Find the email, or the URL you saved from the enable popup.
- Open the URL in your browser.
- Your current IP is whitelisted so you can log in again.
- If 2FA caused the lockout, 2FA is temporarily deactivated so you can reach wp-admin and fix your 2FA settings.
Keep it safe
- Do not share the URL. Anyone who visits it can whitelist their IP (and temporarily bypass 2FA).
- Store it offline or in a password manager, not only in a mailbox you might lose.
- The secret access URL is not included when you import or export settings. Save it per site.
