I updated the WP Cerber Security plugin yesterday to version 9.6.11, and now when I try to log in, I get the error - Human verification failed. I had to deactivate the plugin so I could log in. Any ideas? My IP Address is whitelisted in the system.
This is not related to 2FA.
The “Human verification failed” message comes from Cerber’s anti-bot / anti-spam protection (CAPTCHA / behavioral checks).
After updates, these rules can become stricter and may block even whitelisted IPs.
Check the Cerber Activity log while reproducing the issue to identify which request is being blocked.
Sometimes a specific page or a poorly written plugin triggers the anti-spam engine.
From experience, this can happen even for admins and whitelisted IPs the anti-spam engine evaluates the request/object, not the human.
If needed, search for the blocking event in the Activity log and post the report here (with sensitive data anonymized).
Without technical details, the Cerber team cannot investigate or provide a meaningful answer — it’s that simple.
Without technical details, it becomes a guessing game for developers ![]()
Without logs or concrete data, the Cerber team has nothing to analyze, so responses are often limited.
![]()
After an update, something that previously worked may now be blocked by new rules.
This is far more often a tightening of security rules than an actual plugin malfunction.
Here is the link for the Activity Log that you requested - https://drive.google.com/file/d/1N1nC0ybkcshocTZYUvMDFH-aPYnr41BZ/view?usp=sharing.
If I can’t get this resolve then I’ll just need to install a different security plugin.
Hi Eve,
This issue is not related to 2FA.
The error “Human verification failed” comes from WP Cerber’s anti-bot reCAPTCHA protection, not from authentication itself.
In your Activity Log, the login attempts are blocked with events like “reCAPTCHA verification failed” on /wp-login.php, which means the request is rejected before the login process.
Here are a few simple things you can check and test.
- Anti-spam engine settings
Go to WP Cerber ( Anti-spam ) (Anti-spam engine.)
On this page, you’ll find options such as
Protect registration form
Try temporarily disabling this option and test the login again.
On the same page, you can also:
Disable anti-spam protection for IPs in the White IP Access List
This is especially useful if you’re working in a development or admin environment.
- reCAPTCHA settings
Go to WP Cerber (Anti-spam) ( reCAPTCHA).
Check in the Google reCAPTCHA console that:
the domain name is correct
the site key and secret key match that domain
If everything looks correct but the issue persists, try regenerating the reCAPTCHA keys on Google and re-entering them in Cerber
(Google reCAPTCHA keys sometimes break or desync after updates it happens more often than expected)
In the same reCAPTCHA tab, you can also:
Temporarily disable Protect registration form
Review the other reCAPTCHA options that may block legitimate admin logins
Why this works
Your log clearly shows reCAPTCHA verification failed, so this is almost certainly a configuration or environment issue, not a plugin malfunction.
Disabling these protections one by one should quickly confirm the exact cause.
Hope this helps ![]()
Ovnis
just a simple developer helping people ![]()