The plugin tries to verify the licence with HTTPS://www.wordfence.com/about-wordfence/” target=”_blank” rel=”noopener noreferrer”>Wordfence servers. If the key does not match the expected format, is expired, or the request never reaches the server, Wordfence returns an invalid API key error. The error stops premium features, scans and firewall rules.
Typical triggers include a copied key with extra spaces, a revoked licence, a corrupted database entry, an outdated plugin version, or outbound HTTPS being blocked by the host.