Hi @webparaplan
A Turnstile token is valid for 300 seconds do it take more time to resolve captcha challenge ?
You can Rename the plugins folder “all-in-one-wp-security-and-firewall” to “all-in-one-wp-security-and-firewall-deactivated” at location /wp-content/plugins/all-in-one-wp-security-and-firewall It will deactivate the plugin and will allow to access using wp-login.php
Then rename back the folder to “all-in-one-wp-security-and-firewall” removed “-deactivated” it will activate again.
Please cross check why you logged in incognito window that turnstile captcha works.