2.1.175 refuses a hash_check restore that extracts files unless the archive still lists file hashes. Extra Show stays passwordless. 2.1.174 refuses a bound restore when extracted files are not in the listed hashes. Extra Show stays passwordless. 2.1.173 refuses a hash_check restore that lists a SQL dump unless db.sha256 still stays. Extra Show stays passwordless. 2.1.172 checks listed db size on a bound restore even without db.sha256. Extra Show stays passwordless. 2.1.171 refuses a bound restore that lists db.sha256 unless hash_check still stays. Extra Show stays passwordless. 2.1.170 refuses a 2.1.114 bind when the archive lists file hashes the bind does not cover. Extra Show stays passwordless. 2.1.169 checks listed file hashes on a bound restore even without hash_check. Extra Show stays passwordless. 2.1.168 refuses a restore archive that names this Site ID unless its bind still verifies. Extra Show stays passwordless. 2.1.167 puts a Hub operator password rotate on the eight-try operator password burst before the Hub operator password. Extra Show stays passwordless. 2.1.166 puts a Hub operator Extra enable or disconnect on the eight-try operator billing burst before the Hub operator password. Extra Show stays passwordless. 2.1.165 puts Extra enable or disconnect on the eight-try Extra burst before the Hub password. Extra Show stays passwordless. 2.1.164 puts saving or removing bucket keys on an eight-try bucket burst. Extra Show stays passwordless. 2.1.163 puts a Cloudflare token save or disconnect on an eight-try Cloud token burst. Extra Show stays passwordless. 2.1.162 puts a Site key rotate on an eight-try rotate burst. Extra Show stays passwordless. 2.1.161 puts a Site disconnect on an eight-try disconnect burst. Extra Show stays passwordless. 2.1.160 puts signing out one device, other devices, or all devices on an eight-try session burst. Extra Show stays passwordless. 2.1.159 puts a Hub two-factor start, finish, or disable on an eight-try two-factor burst. Extra Show stays passwordless. 2.1.158 puts a plan cancel, resume, switch, or close on an eight-try plan burst. Extra Show stays passwordless. 2.1.157 puts Remove selected sites on the eight-try seat burst. Extra Show stays passwordless. 2.1.156 puts Buy more seats on an eight-try seat burst. Extra Show stays passwordless. 2.1.155 puts GET Cloud bound-zone ruleset refresh on an eight-try Cloud ruleset burst. Extra Show stays passwordless. 2.1.154 lists a Hub Extra refresh from Hub support under Account activity. Extra Show stays passwordless. 2.1.153 lists a Hub Extra enable or disconnect from Hub support under Account activity. Extra Show stays passwordless. 2.1.152 puts a Hub virtual-patch validate on the eight-try virtual-patch burst. Extra Show stays passwordless. 2.1.151 puts a Hub operator password rotate on the eight-try operator password burst. Extra Show stays passwordless. 2.1.150 puts a Hub Extra enable or disconnect on the eight-try Extra burst. Extra Show stays passwordless. 2.1.149 puts a Hub operator billing portal or export on an eight-try operator billing burst. Extra Show stays passwordless. 2.1.148 puts a Hub site rotate or license override on an eight-try operator console burst. Extra Show stays passwordless. 2.1.147 puts a Hub Care claim, start, or complete on an eight-try Care queue burst. Extra Show stays passwordless. 2.1.146 puts a Hub virtual-patch stage, publish, or rollback on an eight-try virtual-patch burst. Extra Show stays passwordless. 2.1.145 puts a Hub support connect or reset email on an eight-try support burst. Extra Show stays passwordless. 2.1.144 treats Extra as available when Extra is configured. Extra Show stays passwordless. 2.1.143 lists a Shield Care cleanup fee under Account activity. Extra Show stays passwordless. 2.1.142 lists a sites, activity, billing, or Care handoff CSV downloaded from Hub support under Account activity. Extra Show stays passwordless. 2.1.141 lists a site suspend, complimentary Pro, or override clear from Hub support under Account activity. Extra Show stays passwordless. 2.1.140 lists a connect or sign-in email from Hub support under Account activity. Extra Show stays passwordless. 2.1.139 lists a Site key rotate, restore, or revoke from Hub support under Account activity. Extra Show stays passwordless. 2.1.138 lists a password reset email under Account activity. Requesting a password reset stays a click. Site keys revoked after a password or 2FA change are listed under Account activity. Extra Show stays passwordless. 2.1.137 lists a Care follow-up note or site details save under Account activity. Saving a Care follow-up note or site details stays a click. Extra Show stays passwordless. 2.1.136 lists a Care WordPress access save or revoke under Account activity. Saving or removing Care WordPress access stays a click. Extra Show stays passwordless. 2.1.135 lists a weekly summary or setup reminder change under Account activity. Saving email preferences stays a click. Extra Show stays passwordless. 2.1.134 lists a Hub sign-in lockout under Account activity. Extra Show stays passwordless. 2.1.133 lists a site label save under Account activity. Saving a site label stays a click. Extra Show stays passwordless. 2.1.132 lists a billing portal open under Account activity. Opening Manage billing stays a click. Extra Show stays passwordless. 2.1.131 lists a sites, activity, billing, or Care handoff CSV under Account activity. Export downloads stay a click. Extra Show stays passwordless. 2.1.130 puts Protect settings save, guided lockdown, admin two-factor, virtual-patch raise, and login tighten on the same eight-try Protect burst. Protect settings save stays a click. Guided lockdown, admin two-factor, virtual-patch raise, and login tighten stay a click and share the Protect burst. Extra Show stays passwordless. 2.1.129 puts Watch alert settings on the same eight-try Watch burst. Watch alert settings stay a click. A restore preview is listed under Account activity. Preview restore stays a click. Extra Show stays passwordless. 2.1.128 lists a Watch URL save, a Watch check, a Watch test, and Watch alert settings under Account activity. Watch URL, Check now, and Send test stay a click. A backup download stays a click. Extra Show stays passwordless. 2.1.127 lists a Copy now or restore under Account activity. Copy now and restore stay a click. Turning Extra protection on or off is listed under Account activity. Extra Show stays passwordless. 2.1.126 lists a backup download under Account activity. Saving or removing bucket keys is listed under Account activity. Extra Show stays passwordless. 2.1.125 lists a Cloudflare token Show and a bucket key Show under Account activity. Extra Show stays passwordless. 2.1.124: The Cloud dashboard no longer lists token zones on a refresh. Load zones stays a click. Extra Show stays passwordless. 2.1.123 lists a Cloudflare zone list under Account activity and refuses a ninth list in 15 minutes. Extra Show stays passwordless. 2.1.122 asks for the Hub password before saving a Cloudflare zone. Extra Show stays passwordless. 2.1.121 asks for the Hub password before turning Cloud firewall on or off, or disconnecting one site. Extra Show stays passwordless. 2.1.120 asks for the Hub password before saving or disconnecting a Cloudflare token, and lists those writes under Account activity. Extra Show stays passwordless. 2.1.119 refuses Extra protection Refresh after eight tries in 15 minutes and lists a refresh under Account activity. Saving or removing bucket keys needs your Hub password. Extra Show stays passwordless. Extra protection is an optional layer for paid Pro and Shield Care. Basic and trial sites stay off. Open Extra protection in the Hub, then turn it on for one site. Turn on and turn off need your Hub password, and 2FA when enrolled. The activation key stays sealed. Show does not ask for a password. A revealed extra protection key hides after 15 seconds, and print remasks it before the page is printed. Extra Show burst now refuses after six reveals in 15 minutes. An Extra Show is listed under Account activity. A Care WordPress access reveal is listed under Account activity. 2.1.118 still keeps Extra Show passwordless. 2.1.117 still keeps Extra Show passwordless. 2.1.116 still keeps Extra Show passwordless. 2.1.115 still keeps Extra Show passwordless. Signing out a device needs your Hub password.

Stats cards show open, mitigated, and resolved vulnerabilities, threats blocked, and whether the site has checked in. If extra protection cannot start on another site, Hub says to contact support. Existing sites stay on.

Turn off removes it from that site. Closing the Hub account also turns it off for every site on that account. Site key Show stays passwordless. Basic stays $15 / month. Cleanup stays $199 once. You never change DNS. Open Extra protection.