---
title: Blocked Login Recovery
description: "Blocked login recovery helps legitimate users regain access when `Block new login` mode prevents a new sign-in. ![](data:image/gif;base64,R0lGODdhAQABAPAAAP///wAAACwAAAAAAQABAEACAkQBADs=) ## How it works When a user hits the session limit in `Block new login` mode: 1. The new login is blocked…"
url: "https://handyplugins.co/docs/blocked-login-recovery/"
updated: "2026-03-17"
category: SessionQuota Pro
---

# Blocked Login Recovery

Blocked login recovery helps legitimate users regain access when `Block new login` mode prevents a new sign-in.

![](data:image/gif;base64,R0lGODdhAQABAPAAAP///wAAACwAAAAAAQABAEACAkQBADs=)

## How it works

When a user hits the session limit in `Block new login` mode:

1. The new login is blocked
2. The user can request a one-time recovery email
3. The email contains a temporary link
4. The user follows the link to log out other active sessions
5. The user can try signing in again

## When to use it

Enable this feature if:

- You want to reduce support tickets
- Your users often switch between devices
- You use strict login blocking but still want a self-service recovery path

## Where to configure it

Go to the `General` tab and select `Block new login`.

You can then enable block mode option:

- `Allow blocked users to recover access via email`
- `Email Cooldown`
- `Recovery Link Expiry`

## Recommended settings

For most sites, a good starting point is:

- Email cooldown: `5` minutes
- Recovery link expiry: `30` minutes

## Important notes

- This feature is only relevant when `Block new login` is the active enforcement mode
- If another mode is active, blocked login recovery is not used
- Short cooldown values can increase email volume
- Long expiry times can make recovery links less secure

## Best practices

- Use a clear email sender identity on your site
- Test the full recovery flow after setup
- Make sure your WordPress email delivery is reliable
- Keep the cooldown long enough to discourage repeated abuse