Pause WordPress security alerts for maintenance, keep protection on
You can pause WordPress security alerts for maintenance without switching protection off, because BetterShield separates the email from the checks behind it. There are three ways to quiet the email: Mute all alerts, a Planned maintenance window and holding one event type for the weekly summary. Each stops a different amount of mail, and none of them turns off an audit, a protection or the activity record.
Our guide to WordPress security email alerts explains the whole screen. This post is for the day you are about to update plugins, move hosts or run a batch of changes, and want to know which pause to reach for.
Quick summary
- Mute all alerts stops instant security email and the weekly summary. It is off by default, and anything that happens while it is on is dropped, not sent later.
- Planned maintenance holds routine administrator, plugin, theme, core and file-change alerts for 30 minutes, 1 hour, 2 hours or 4 hours, then sends one closing summary.
- Instant alerts by type lets you hold a single event type for the weekly summary. Critical events are never held this way.
- Audits, findings, protections and activity recording keep running under all three.
- Account recovery mail still goes out while you are muted.
Why pause the email at all
A busy maintenance session produces a lot of true but unremarkable events: an administrator signed in, three plugins updated, a theme changed, files replaced. Every one of them is something you did on purpose. If each one lands in your inbox, the messages stop being read, and the one that matters is easier to miss.
The aim is to quiet the routine mail for a short, known period, and let everything else carry on. The WordPress documentation on updating WordPress is a reminder of how much a normal update changes in one go, which is exactly the kind of planned work these controls are for.
BetterShield keeps recording while you work. The WordPress activity log still holds every event in full, so pausing the email never creates a gap in what you can review afterward.
The three tools side by side
| Mute all alerts | Planned maintenance | Hold an event type | |
|---|---|---|---|
| What it stops | Instant security email and the weekly summary | Routine administrator, plugin, theme, core and file-change alerts | Instant email for one event type |
| How long | Until you turn it off | 30 minutes, 1 hour, 2 hours or 4 hours, then it ends by itself | Until you turn the type back on |
| Critical events | Muted with everything else | Still sent straight away | Still sent straight away |
| Closing message | None | One closing summary | Held events wait for the weekly summary |
| Audits, protections and activity record | Keep running | Keep running | Keep running |
If you only remember one rule, make it this one: use a maintenance window when you want to be told about anything unusual, and use mute only when you have another way of watching the site.
Mute all alerts
Mute all alerts is the blunt tool. Turning it on stops instant security email and the weekly summary. The switches for those two messages appear off while you are muted, and they go back to what you had chosen once you unmute.
What keeps going:
- Audits, findings, protections and activity recording.
- Account-specific recovery mail, including lockout-clearing links, enabled new-network notices and replacement recovery links.
What does not: a security alert that happens while you are muted is dropped. It is not sent later when you unmute. It is still in Site activity, but nobody is emailed about it.
Set it up
- Open BetterShield › Settings › Email Alerts.
- Find Mute everything.
- Turn on Mute all alerts.
The Overview, the dashboard widget and Activity show that alerts are muted. To check it, select Send a Test Alert and confirm it states that nothing was sent until you unmute. From the command line, wp bettershield alerts mute --user=admin and wp bettershield alerts unmute --user=admin do the same thing, as described in the WP-CLI guide.
The full steps are in the mute email alerts guide.
Planned maintenance
A maintenance window is the better fit for most update sessions, because it keeps the important mail flowing.
Duration offers 30 minutes, 1 hour, 2 hours and 4 hours, with 2 hours preselected. Start Maintenance then holds routine administrator, plugin, theme, core and file-change alerts. Those events are still recorded in Activity and still appear in the normal digest.
Several kinds of event keep their normal immediate path during a window: critical events, decoy hits, lockdowns, passkey-only arming and protection changes. Enforcement stays on throughout, and the window ends by itself when its time is up, even if scheduled work is late.
The closing summary
When the window ends, BetterShield sends one closing summary. It follows your instant-email and mute choices, and it counts as a high alert. That decides who receives it:
- An address set to High and critical gets it.
- An address set to Critical only gets it only when something in it is critical.
- An address set to None does not get it.
The guide to choosing what each address gets describes those three choices, and it is worth a look before your first window so the right people see the summary.
Set it up
- Open BetterShield › Settings › Email Alerts and find Planned maintenance.
- Choose a Duration.
- Select Start Maintenance just before you begin the work.
- Select End Maintenance if you finish early.
The row should show Active until with a time, and a count of events recorded and held. The step-by-step version is in the planned maintenance guide.
Hold one event type for the summary
Sometimes the noise is one kind of event, all week, not one afternoon. For that, open Instant alerts by type on the same screen. Each event type that has sent an instant email on your site is listed, grouped by area, each with a switch that is on by default.
Turn a type off and its new events are still recorded in full. They no longer send an instant email, and they appear in the weekly summary instead when the summary is on. With the summary off, a held type is not emailed at all, so check that it is on before you hold anything.
Two details keep this safe:
- With instant alerts on, a critical event bypasses the hold. The row says “Critical alerts are always sent at once.” A type that has been critical on your site is locked on.
- The switches are disabled while alerts are muted, and while Email me about high and critical events as they happen is off.
Hold only routine types that are noisy and rarely need a same-hour answer. Keep sign-in, account and file-change types instant. The guide to holding an event type lists the rest.
What each pause can break, and how to undo it
None of the three removes a protection, but each can leave you less informed, and that is the thing to watch.
- Mute can hide an important event. Turn Mute all alerts off to resume mail. Events stay in Activity, but dropped email is not replayed.
- A maintenance window delays routine mail into the closing summary, and the summary may not exist at all if all alerts are muted. Select End Maintenance to go back to normal delivery. Recorded events are not lost.
- A held type will not wake anyone. A real problem of that type, if it is rated high and not critical, waits for the next weekly summary. Turn the switch back on to restore instant email.
If you use Ask for my password before removing a protection, making alerts quieter counts as lowering protection, so BetterShield asks for your password first. Our post on asking for a password before removing a protection covers that setting and how long one confirmation lasts.
Check it is working
- Start the pause you chose.
- Make a small, reversible change that you would normally be emailed about, such as updating one plugin.
- Open Site activity and confirm the event is recorded.
- Confirm no instant email arrives for it while the pause is on.
- End the pause, then confirm the closing summary or the next normal message arrives as you expect.
If you want to confirm WordPress can send mail at all before you rely on any of this, use Send a Test Alert with alerts unmuted.
Recommended settings
We recommend a maintenance window for planned work: choose the shortest duration that covers the job, and start it immediately before the changes, not hours earlier. We suggest saving Mute all alerts for a deliberate full pause when you have another monitoring plan in place. And we suggest holding an event type only for routine types that are noisy on your site.
Whichever you pick, put a reminder in your calendar to end it. A pause you forget about is the only way this goes wrong.
Frequently asked questions
Does muting alerts turn off BetterShield’s protections?
No. Audits, findings, protections and activity recording continue while Mute all alerts is on. Only the security email and the weekly summary stop.
Will I get the alerts I missed when I unmute?
No. Security alerts that occur while you are muted are dropped, not sent later. They remain in Site activity, so you can still review them there.
Are critical alerts sent during a maintenance window?
Yes. Critical events, decoy hits, lockdowns, passkey-only arming and protection changes keep their normal immediate path during a planned maintenance window. Routine administrator, plugin, theme, core and file-change alerts are held.
How long can a maintenance window last?
You can choose 30 minutes, 1 hour, 2 hours or 4 hours. The window ends automatically, and you can select End Maintenance to finish early.
Can I hold one kind of alert instead of pausing everything?
Yes. Use Instant alerts by type to turn one event type off so its events go to the weekly summary. Critical events still send at once.
Is this part of the free plugin?
Yes. Muting, planned maintenance and holding an event type are part of the free BetterShield plugin on WordPress.org.
Conclusion
Pausing the email is not the same as pausing the protection. Use a planned maintenance window for update sessions, mute only for a deliberate full pause, and hold an event type when one kind of message is the only noise. Whichever you use, the checks, the protections and the activity log carry on, and a reminder to end the pause keeps it that way.
BetterShield is free on WordPress.org. The full steps for the window are in the planned maintenance guide.