Getting started with apSecurity

Introduce protections gradually and verify a recovery path before enforcing login or network-facing rules.

Install and recover your download

1. Back up the site and test on a staging copy first.
2. Download the current ZIP from your purchase confirmation or My Account.
3. Open WordPress → Plugins → Add New → Upload Plugin. Upload the ZIP, install, and activate it.
4. Open the product’s License screen and activate the purchased key for the retail update and support service.

Configure safely

1. Keep a working administrator session and a verified host recovery method available.
2. Open apSecurity and review the current settings and diagnostics.
3. Before enabling IP controls, confirm how your host and proxy report the visitor address. A shared proxy address must not be mistaken for every visitor.
4. Test login protection with a separate browser session and an account you control. Confirm that legitimate access remains available.
5. Enroll and verify 2FA before requiring it, and retain recovery codes securely.
6. Configure optional CAPTCHA or edge-provider integration only when intended, using credentials appropriate to the required permissions. Keep API credentials out of screenshots, exports, source repositories and support messages.

Scanner and recovery checks

Review scanner findings before taking action. A scan result is not automatic proof that a file is malicious. Confirm the recovery procedure with a controlled test before depending on emergency-access tools.

Acceptance check

• Legitimate sign-in and recovery both work.
• The expected visitor IP is recorded behind the actual hosting/proxy setup.
• 2FA accepts a valid code and rejects an invalid code.
• Optional external controls behave correctly without locking out the administrator.
• Logs and exported evidence contain no credentials.

No security product can guarantee complete protection. Keep WordPress, PHP, themes, plugins, backups and hosting protections maintained.

Updates, rollback, and support

Take a fresh backup before updating and verify the same workflow on staging. If an update causes a problem, restore your previous verified plugin package and database backup as appropriate. Do not uninstall a plugin merely to troubleshoot it; data retention differs by product.

For help, email [email protected] with the product/version, WordPress/PHP versions, site URL, exact steps, error message, and last four license-key characters. Remove credentials and personal data from logs. Never send passwords, API keys, complete license keys, card numbers, or card security codes.