Install the WordPress plugin

Tocsin24 walks you through the “Installing and pairing the WordPress module” step of your instance (you can find it later under Settings › Plugin). This guide details each step and the messages you might come across.

1. Install the plugin

1. In Tocsin24, click “Download the WordPress plugin”: you get a .zip archive. Do not unzip it.
2. In the WordPress admin, open Plugins › Add New Plugin, then “Upload Plugin”.
3. Choose the archive, click “Install Now”, then “Activate Plugin”.

Always install the archive downloaded from Tocsin24: it creates the tocsin24-connector folder, the only one WordPress can update.

2. Copy the access key into Tocsin24

On activation, the plugin generates a 40-character access key. It is shown only once: copy it straight away.

1. In WordPress, open Settings › Tocsin24, “1. Access key” section, and copy the key.
2. In Tocsin24, paste it into “Plugin access key”. In “WordPress site address”, enter the address shown by the plugin under the key (“Site address to declare in Tocsin24”).
3. Click “Save”.

WordPress keeps only a hash of the key: if you leave the page without copying it, generate a new one (“Generate a new key”).

3. Pair the site

Pairing proves that you manage the site. The code is used only once.

1. In Tocsin24, click “Generate a pairing code”. It lasts one hour.
2. In WordPress, Settings › Tocsin24, “2. Pairing” section, paste the code into “Pairing code”.
3. The “Allowed IP addresses” field is already filled in with the platform addresses: keep them.
4. Click “Save”.
5. In Tocsin24, click “Verify the pairing”. The instance becomes active and the first scans start.

If your site is behind Cloudflare or a load balancer, also fill in “Trusted proxies” with that service’s addresses, one per line. If a security plugin filters the REST API (/wp-json), allow the platform IP addresses there.

Web server logs and built-in log

Further down Settings › Tocsin24, two settings, allowed by default:

• Web server logs: Tocsin24 reads the access and error logs that the plugin finds, after you confirm in Tocsin24. If the plugin cannot find them, enter their folder in “Web server log folder”.
• Built-in log: when you enable it in Tocsin24, the plugin itself records the visits handled by WordPress (two days at most). Useful when the hosting provider gives no access to the logs.

Update the plugin

• New versions appear under Plugins, like for any plugin: click “Update now”. You can also turn on automatic updates for the plugin.
• Tocsin24 shows the installed version under Settings › Plugin, with the latest published version and a button to download it.
• Updating keeps the key, the pairing and your settings: nothing needs redoing in Tocsin24.

After a reinstallation (plugin deleted then reinstalled), a new key is generated: paste it into Tocsin24, Settings › Plugin, then “Save and verify”. You do not need to pair again.