Version 10 is a disaster

Hi @dsl225,

Thanks for reaching out.

Yes, you can keep your existing settings. They are stored in the WordPress database, not in the plugin files, so updating to version 10 does not wipe years of configuration. If a site is already on 10.x and you have not re-run the setup wizard, imported a different config, or used the reset tools, those settings should still be there.

If you want a copy before you decide anything else, go to Security → Tools and use Export Settings. That downloads a JSON file you can keep. Import Settings can put it back later if you need to.

Note that version 10.0.1 fixed a real bug where a race condition could empty wp-config.php or .htaccess. 10.0.2 and 10.0.3 added more fixes. Older zips are still listed here under Previous Versions on the plugin’s Advanced page, but they miss those patches.

Uninstalling is a different step from staying on 10.x. If you delete the plugin and clean out its database data, that is how you actually lose the old settings.

If a specific site did reset (Hide Backend slug, 2FA, lockouts, etc.), tell us which setting changed and whether the setup wizard ran again after the update. That is usually what overwrites a long-standing config, not the 10.x update itself.

I hope this helps!