Repeated Wordfence Alerts of User locked out from signing in

I set up basic authentication on the wp-admin folder it seems to be working fine but I still get repeated Wordfence Alerts of User locked out from signing in. I wonder is B-auth not secure at all? And I even did everything in the Hardening WordPress Post. Am i missing something?