Scan Mode (Light / Full)

Description: Controls how intensive integrity scans are, balancing depth vs. performance. How it works: scan_mode determines the scan strategy, such as a lighter pass for frequent checks versus a deeper pass for audits. How to access / configure: WP Admin → AegisShield → File Integrity. Select Scan Mode. Save and run a scan. Recommended setting: Use Light for scheduled scans; run Full after updates or when investigating an incident.

Description: Exclude known-noisy paths (cache, logs, backups) from integrity monitoring. How it works: Excluded patterns are skipped during scans, reducing false positives and improving performance. How to access / configure: WP Admin → AegisShield → File Integrity. Add paths/patterns to the exclude list. Save changes and rerun scan. Recommended setting: Exclude cache folders and temporary files; do not exclude plugin/theme core files.

Detect New / Modified / Deleted Files

Description: Detects file additions, changes, and deletions in monitored directories. How it works: Each scan compares current directory listings and hashes to the baseline and flags differences as new/modified/deleted. How to access / configure: WP Admin → AegisShield → File Integrity. Run a scan. Use filters to view New / Modified / Deleted findings. Recommended setting: Treat unexpected PHP file changes in plugins/themes/uploads as high priority.

Core Checksum Baselines

Description: Builds a baseline of known-good file checksums to detect unexpected changes. How it works: AegisShield records checksums for monitored paths; later scans compare current checksums against baseline to detect modifications. How to access / configure: WP Admin → AegisShield → File Integrity. Run the baseline/scan to initialize monitoring. Review results for unexpected changes. Recommended setting: Create a fresh baseline right after a clean install and after major updates you trust.

MFA QR Engine Selection

Description: Chooses how QR codes are generated/handled for enrollment (Pro). How it works: The QR engine setting (pro_mfa_qr_engine) controls QR rendering strategy to balance compatibility and privacy. How to access / configure: WP Admin → AegisShield → Login Guard → MFA (Pro). Select the QR engine option. Save and test enrollment on multiple devices/browsers. Recommended setting: Prefer the most compatible QR option; avoid third-party QR endpoints if privacy is a concern.

MFA Methods (Authenticator / Email)

Description: Controls which MFA methods users can use (e.g., authenticator app via QR, email codes). How it works: AegisShield exposes allowed methods in the enrollment UI and validates codes using the selected method’s provider. How to access / configure: WP Admin → AegisShield → Login Guard → MFA (Pro). Select allowed MFA methods. Save and test enrollment for a non-admin user. Recommended setting: Allow authenticator + backup codes as primary; keep email MFA as fallback if needed.

Description: Allows devices to be remembered for a period, reducing repeated MFA prompts (Pro). How it works: When enabled, AegisShield issues a secure trusted-device token and honors it until expiry (pro_trusted_device_lifetime_days). How to access / configure: WP Admin → AegisShield → Login Guard → MFA (Pro). Enable “Trusted devices”. Set device lifetime days and Save Changes. Recommended setting: Enable with 30 days; lower for high-risk or shared-computer environments.

MFA Event Logging & Alerts

Description: Logs MFA enrollments, challenges, failures, and recoveries—and can trigger alerts (Pro). How it works: MFA events are written to Activity Log and can be used by Alert Rules to send email notifications. How to access / configure: WP Admin → AegisShield → Activity Log. Filter for MFA events. Configure Alert Rules to notify on repeated MFA failures (Pro). Recommended setting: Alert on repeated MFA failures and on admin MFA being disabled.

MFA Enforcement Policies

Description: Defines how and when MFA is required (e.g., always, only on wp-admin, remembered/trusted devices). How it works: Policies evaluate context (role, device trust, session age) to decide whether to prompt for MFA. How to access / configure: WP Admin → AegisShield → Login Guard → MFA (Pro). Choose enforcement mode and trusted device settings. Save changes and test login flows. Recommended setting: Enable trusted devices with a 30‑day lifetime to reduce friction while maintaining security.

Mandatory MFA for Administrators

Description: Ensures every administrator must use MFA before accessing wp-admin (Pro). How it works: If an admin account is not enrolled, AegisShield can force enrollment and restrict access until complete. How to access / configure: WP Admin → AegisShield → Login Guard → MFA (Pro). Enable “Mandatory for administrators”. Ensure all admin accounts can receive MFA codes and have backup codes. Recommended setting: Turn this on for production sites; remove unused admin accounts first.

News & Events

Categories: AegisShield
Scan Mode (Light / Full)
read more
Categories: AegisShield
Basic Exclude List
read more
Categories: AegisShield
Detect New / Modified / Deleted Files
read more
Categories: AegisShield
Core Checksum Baselines
read more
Categories: AegisShield
MFA QR Engine Selection
read more
Categories: AegisShield
MFA Methods (Authenticator / Email)
read more
Categories: AegisShield
Trusted Devices
read more
Categories: AegisShield
MFA Event Logging & Alerts
read more
Categories: AegisShield
MFA Enforcement Policies
read more
Categories: AegisShield
Mandatory MFA for Administrators
read more

keep updated & don’t miss anything!

We regularly develop new plugins and release them for free because they’re solutions we trust and use ourselves.

By entering your email, you agreed to our Privacy Policy and Terms & Conditions

Frequently Asked Questions

Support Docs

Ticketing System

scan integrity scans mode pass run description controls intensive balancing depth performance works determines strategy lighter frequent checks versus deeper audits access configure admin aegisshield file select save recommended setting use light scheduled full updates investigating incident

Powered by Aegisify Links

2026 - Aegisify.com - Everything Your WordPress Site Needs, One Platform. One Price.

Privacy Policy * Terms of Use * Free Plugin Disclaimer * End User License Agreement