The following are included in a Wordfence export/import:
- All default options
- Scan Schedule
- Manually and permanently Blocked IPs
- Blocking rules
Note that the following settings are not exported:
- Disabled firewall rules
- All Allowlisted URL/Param firewall entries
- Web Application Firewall Status
- The firewall Protection Level
- The Real-Time IP Blocklist
All of the above firewall settings are found in the Firewall Options section on the Wordfence All Options page.
When you export your options, you will be given a token which is an alphanumeric string approximately 128 characters long. Keep this token secure. If anyone gains access to it, they can import your Wordfence settings (excluding your API key). Wordfence does not expire these tokens, so your exported settings will be available indefinitely. This policy may change in future.
To import your Wordfence settings to another site, you need an export token (see Export above). Paste the token into the text field and then click to “Import Wordfence Options.” There is no delay, and the import will be instant. You will see a message telling you how many Wordfence options were imported, and then you will be asked to reload the current page.