With ‘Trusona only’, how are users still locked out from signing in?

Hi Babak,

Thanks for using Trusona.

Actually, the “Trusona Only” mode hides and takes away the password login form from the user experience. But it cannot prevent hackers from automating the WordPress login flow and triggering failed login attempts, especially if the users’ usernames are common or the WordPress defaults.

Hope this helps explain your observation.