Description: Blocks or penalizes login attempts for usernames that do not exist, reducing user enumeration and brute-force noise.
How it works: If block_unknown_user is enabled, AegisShield can treat unknown usernames as hostile and deny/lock faster.
How to access / configure:
- WP Admin → AegisShield → Login Guard.
- Enable “Block unknown user” (if shown) and Save Changes.
Recommended setting: Enable on most sites; keep it off only if you rely on custom auth flows that probe usernames.