What it is
Security comes in layers, according to the profile. Essential: limits login attempts, hides the WordPress version and blocks user enumeration. Recommended: protects sensitive files and blocks PHP in the uploads folder. Advanced: filters attacks before WordPress loads and locks the dashboard code editor. The Security screen also has the full Scan (compares every WordPress, plugin and theme file with the official WordPress.org copy, looks for malicious code in the rest and in the database, and lets you repair or delete with one click), Plugins with known problems (closed on WordPress.org, outdated or abandoned), the Activity log (who logged in, published, installed or changed what) and open Sessions (who is logged in, on how many devices).
How to use it
- Pick a profile in the wizard, or turn each protection on in the Security screen.
- The IP of whoever set it up goes on the allow list, so you never get locked out.
- If another security plugin (Wordfence, Solid, All In One WP Security) already limits logins, Ranking Suite leaves that part to it.
- For the full scan, open Security → Scan and click Scan now; you can also let it run by itself once a week.
Common problems
The scan flagged a file that is mine.
Use "Ignore this finding" and write the reason, or "Ignore until it changes" — if the file changes later, it comes back to the list.
Can I delete a WordPress file the scan flagged?
No: official WordPress, plugin or theme files can only be repaired (the original copy from WordPress.org comes back). Deleting one of them takes the site down.
I got locked out of the login.
Wait the time shown on screen, or log in from another network (e.g. your phone's mobile data) and allow your IP in the Security screen.
A plugin stopped working after the Advanced profile.
Use "Undo last change" in Security and turn protections on one by one to find the one in the way.
If something goes wrong
If the attack filter is blocking you, use your host's file manager to create an empty file named ranking-firewall-off inside the wp-content folder. The filter stops immediately.
Didn't find the answer? Ask in the WordPress.org support forum.