Skip to content

WordPress.org

English (Canada)

  • Home
  • Blog
  • Themes
  • Plugins
  • Join the Team
  • Style Guide
  • About Us: Our Mission
  • Get WordPress

Plugins

  • My Favourites
  • Beta Testing
  • Developers
Download

Login No Captcha reCAPTCHA

By Robert Peake
  • Details
  • Reviews
  • Installation
  • Support
  • Development

Description

Adds a Google No Captcha ReCaptcha checkbox to your WordPress and Woocommerce login, forgot password, and user registration pages. Denies access to automated scripts while making it easy on humans to log in by checking a box. As Google says, it is “Tough on bots, easy on humans.”

Screenshots

  • Configuration options screen
  • Login screen once configured

Installation

Install as normal for WordPress plugins.

FAQ

Why should I install this plugin?

Many Worpdress sites are bombarded by automated scripts trying to log in to the admin over and over.

The No Captcha is a very simple, Google-supported test to quickly deny access to automated scripts. It is great by itself to instantly make your WordPress site more secure, or can be used with other plugins (like Google Authenticator, Limit Login Attempts, etc.) as part of a defense-in-depth strategy.

There are a lot of other plugins for this, why should I install this one?

I’ve gone to great lengths to try to make sure this plugin is easy to use and install, that it is compatible with different WordPress configurations, supports multiple languages, and that you won’t accidentally lock yourself out of the admin by using it. I use it myself on my own sites as well. So far, it just works.

Does this plugin support [insert name] custom login page plugin?

Probably not. Many custom login form plugins do not call the standard login_form action hook from their login forms, making it impossible to correctly render the captcha after the password prompt. For this reason, this plugin only supports the default wp-login.php and WooCommerce forms. Many such plugins do offer captcha fields (sometimes as a paid upgrade). This plugin tries to do just a few things well.

Does this plugin add a CAPTCHA to comment forms?

No. This plugin is designed to thwart automated hacking attempts, not prevent comment spam. Most good comment plugins have their own spam prevention methods. This plugin tries to do just a few things well.

Does this plugin add a CAPTCHA to custom forms?

No. This plugin is designed to thwart automated hacking attempts, not prevent spam from custom forms. Most good custom form plugins have their own spam prevention methods. Many of them support a CAPTCHA field already. This plugin tries to do just a few things well.

Can I help?

Yes, please. Submit pull requests on github.

I am having trouble with the reCAPTCHA in Internet Explorer

Please see this page for help from Google.

I still see lots of brute force attacks against /wp-login.php in my log files

The reCAPTCHA plugin will not prevent the attempt of brute force attacks, rather it will simply ensure that they do not succeed. That is, scripts may still attempt direct POST attacks against /wp-login.php, but without the correct reCAPTCHA data, they will not go through (even if they have guessed the login and password correctly). To prevent repeat attempts against /wp-login.php, consider using a plugin that limits login attempts in conjunction with this one. Other approaches, such as a web application firewall should also form a part of your complete defense-in-depth strategy.

Where can I learn more about Google reCAPTCHA?

https://www.google.com/recaptcha/intro/index.html

What are your boring legal disclaimers?

This plugin is not affiliated with or endorsed by Google in any way. Google is a registered trademark of Google, Inc. By using reCAPTCHA you agree the terms of service set out by Google. The author provides no warranty as to the suitability to any purpose of this software. You agree to use it entirely at your own risk.

Reviews

Installs easily. Protects WooCommerce and WordPress logins

MM August 19, 2019
Works exactly as described! Super easy to install. It was up and running in minutes. Setup instructions are simple: Install the plug-in, activate it, and from your Dashboard go to Settings > Login NoCaptcha. Copy/paste your Google ReCaptcha keys and hit the Save Changes button. At first I added my own IP address to the Whitelist box, but decided to remove it for testing purposes. After doing that and Saving again, an example ReCaptcha box appeared along with simple instructions to perform some tests. Following those instructions, I opened a new window and navigated to my site to check the WooCommerce My Account page. ReCaptcha boxes appeared )(and functioned properly) for new registration, existing user login, and the forgot password screen. I then went to the site's wp-login.php page and confirmed ReCaptcha was displaying and functioning there. Easy-peasy! This is a well done plug in!!!! Thanks!!

Awesome!

Melindark July 22, 2019
This little plug-in has reduced the number of hacker log in attempts. YES!!

Works perfectly

bzomer65 June 10, 2019
I am really glad to have found this plugin it does actually what it says I don't have issues with spam anymore thank you for creating this software.

No Captcha Displays

dustyhale May 18, 2019
The plugin is simple. Has no settings. Only activate or deactivate. No captcha displays on the login or registration. Plugin does not work and displays no captcha.

works as expressed, but can’t add items to cart when plugin is activated..

mcsalesllc May 6, 2019
works as expressed, but can't add items to cart when plugin is activated.. so basically can't use it.. Not sure what the disconnect is as I wish it worked 100% as expected.

Simple and Easy

bsafer April 12, 2019
This was super simple to install and use and did exactly what it said it would. It stopped the hacking attempts we were getting locking our account from the admin panel immediately. I asked a question on forum and received great support from developer. Highly recommend it.
Read all 36 reviews

Contributors & Developers

“Login No Captcha reCAPTCHA” is open source software. The following people have contributed to this plugin.

Contributors
  • Robert Peake

“Login No Captcha reCAPTCHA” has been translated into 2 locales. Thank you to the translators for their contributions.

Translate “Login No Captcha reCAPTCHA” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

1.6.5

  • Tested with 5.3

1.6.4

  • Tested with 5.2
  • Using callback to disable submit buttons

1.6.3

  • Resolve issue with captcha not displaying on embedded login form on WooCommerce checkout page

1.6.2

  • Resolve fatal error with old versions of PHP (reported on 5.4.45)

1.6.1

  • Disable submit buttons via javascript on Woo forms
  • Improve error messaging

1.6

  • Added IP whitelist functionality (thanks @farley1122)
  • More comprehensive protection of signup endpoints, including wp-signup.php and my-account page

1.5

  • Resolve issue introduced in 1.4x whereby captcha was being be bypassed
  • ALL USERS STRONGLY ENCOURAGED TO UPDATE FOR SECURITY REASONS AND NOT USE 1.4x

1.4.1

  • Align language text domain with plugin tag to allow translation contributions

1.4

  • Added support for registration forms (thanks to d2roth)
  • Align filter/hook calls with codex
  • Increase priority (earlier execution) of login checking (prevents unnecessary alerts from e.g. WordFence)

1.3.3

  • Fixed bug with fallback to cURL in cases where TLS is misconfigured

1.3.2

  • Compatibility fix for use of empty() language construct in php 5.x

1.3.1

  • Added experimental support for v3 (hidden for now)

1.3

  • Added reCaptcha to lost password form
  • Added Russian translation
  • Tested with 5.0

1.2.5

  • Revert lost password form change as it was frontend-only

1.2.4

  • Add reCaptcha to lost password form

1.2.3

  • Improved Section 508 compliance
  • Do not check for noCaptcha values when using a non-WordPress authentication method other than WooCommerce
  • Add standard WordPress shake effect to invalid login response

1.2.2

  • Do not check for noCaptcha values when using a non-WordPress authentication method
  • Fix bug with submit button greyed out on settings page

1.2.1

  • Implement noCaptcha for WooCommerce customer login form

1.2

  • Fixed an important security issue (thanks to jezevec10 for reporting) to harden the reCaptcha-enabled login page against clever bots

1.1.11

  • Added French translation (thanks to fdinh)

1.1.10

  • Minor bugfix for error reporting

1.1.7

  • Bug fix for login form display in admin, testing on 4.5

1.1.6

  • Disable login with js until NoCaptcha returns

1.1.5

  • Tested compatible with 4.4x

1.1.4

  • Better display of captcha when javascript disabled (thanks to webmasteral)

1.1.3

  • Improved handling of certain Google responses

1.1.2

  • Improved just-in-time script registration (only for admin/login)

1.1.1

  • Remove warning about enqueueing css/js too early

1.1

  • Major security improvement: now supporting reCaptcha checking with javascript disabled (thanks to mfjtf)

1.0.3

  • Resolve issue with WordPress hosted on an inaccessible domain (e.g. localhost)

1.0.2

  • Resolve bug with wp_remote_post() payload

1.0.1

  • Resolve linking issue due to repository maintainers renaming the plugin

1.0.0

  • Initial release

Meta

  • Version: 1.6.5
  • Last updated: 4 weeks ago
  • Active installations: 70,000+
  • WordPress Version: 4.6 or higher
  • Tested up to: 5.3
  • Languages:

    English (US), German, and Spanish (Spain).

    Translate into your language

  • Tags:
    googleloginnocaptcharecaptchasecurity
  • Advanced View

Ratings

See all
  • 5 stars 29
  • 4 stars 2
  • 3 stars 1
  • 2 stars 1
  • 1 star 3

Contributors

  • Robert Peake

Support

Issues resolved in last two months:

3 out of 5

View support forum

  • About
  • Blog
  • Hosting
  • Donate
  • Support
  • Developers
  • Get Involved
  • Showcase
  • Plugins
  • Themes
  • WordCamp
  • WordPress.TV
  • BuddyPress
  • bbPress
  • WordPress.com
  • Matt
  • Privacy
  • Public Code
  • @WordPress
  • WordPress

Code is Poetry.

Skip to toolbar
  • About WordPress
    • About WordPress
    • WordPress.org
    • Documentation
    • Support
    • Feedback
  • Log In
  • Register