Sometimes administrators lock themselves out after changing a setting or testing a rule. If you cannot access the WordPress admin at all, you’ll need to use FTP or phpMyAdmin.
If the recovery email isn't arriving and you are totally locked out, you’ll need to bypass the plugin manually via FTP or your hosting File Manager (cPanel). wordfence unblock user