Get the Best WordPress Backup
& Migration Plugin Today
Get Duplicator Now

Duplicator Documentation

Documentation, Reference Materials, and Tutorials for Duplicator

How to Fix Installer Security Protection Issues in Duplicator

When using the Duplicator Installer, you may encounter security protection issues that prevent you from proceeding with the installation. This guide covers common issues and their solutions.

Lost Password

If you see a password prompt when loading the Installer and do not remember the password or have lost the password, follow these steps.

Where Are Passwords Set?

  • Duplicator Pro:
    • Navigate to Duplicator Pro » Backups » Add New
Add new backup with Duplicator
  • Then, click the Security tab in the Backup section.
    • The password types that are available are Installer Password and Archive Encryption
  • Duplicator Lite:
    • Navigate to Backups » Create New » Installer » Security
      • Here you can enable and set Password Protection

Note: A password can be set when making a template as well.

Retrieve Installer Password

If the password has not been changed in the settings since the backup was made, you can use the following steps.

Note: If the password in the settings for creating a new backup has been changed, then there is no way to recover the backup password. In this case, a new backup file will need to be created.

Solution 1: Check the Backup Settings

  1. Go to the server where the backup was created.
  2. In the WordPress admin dashboard, navigate to Duplicator » Backups.
  3. Then, click the Security tab in the Backup section.
  4. Finally, click the Eye icon to reveal the last used password.

Solution 2: Check the Template Settings

  1. In the WordPress admin dashboard, navigate to Duplicator » Tools » Templates.
  2. Hover over the template you want to check, and click Edit.
  1. Then, click the Security tab in the Backup section.
  2. Finally, click the Eye icon to reveal the last used password.

Security Check

Duplicator has built-in security to prevent unauthorized access to the installer after it has been initialized. However, in rare cases, you may still see a security notice even after initializing the installer.

Common Error Messages

DUPLICATOR: SECURITY CHECK
SECURITY ISSUE
An invalid request was made.
Message: Invalid token validation

Solution 1: Check Installer Location

Make sure the installer.php file is in the same location as the archive.zip or daf file.

Example:

  • If your archive file is located at:
    /public_html/my-wp-site/archive.zip
  • Then the installer file must also be located at:
    /public_html/my-wp-site/installer.php

Solution 2: Restart Browser

Try the following quick fixes:

  1. Close your browser and reopen it, then navigate to installer.php again.
  2. Clear your browser’s cache and cookies, restart the browser, and try again.
  3. Try a different browser.
  4. Ensure you are not accessing main-installer.php directly. Always start the installation wizard by visiting installer.php in your browser.

That’s it! By following these solutions, you should be able to resolve installer security issues and continue with your Duplicator backup installation.

Are you looking to migrate a website with zero downtime? If so, check out our guide here, “How To Migrate a Website With Zero Downtime.”

Was this article helpful?

Related Articles