I enabled all of the features and was nearly at the perfect % of security. I ultimately had to delete the plugin because once I disabled it and was able to login again, I thought I’d re-enable the plugin in order to take away the feature that changes the wp-admin login URL. Unfortunately, the second I re-enabled it, it locked me out again and I was no longer able to login. I had to disable the plugin AGAIN from PHPMyAdmin and then once I could login again, I just deleted it entirely. Meanwhile, I paid for the country blocker and I’d love to have a refund for that—will contact your company.
Oh and in answer to your question, yes, I did enable whitelisting. I whitelisted my IP. And I never got that error message. It simply kept refreshing the login page over and over every time I entered my [correct] info.
Thanks.