Title: Captchinoo, admin login page protection with Google recaptcha Author: wp-buy Published: mars 18, 2020 Last modified: septembre 4, 2026 --- Search plugins ![](https://ps.w.org/captchinoo-captcha-for-login-form-protection/assets/banner- 772x250.png?rev=2268442) ![](https://ps.w.org/captchinoo-captcha-for-login-form-protection/assets/icon-256x256. png?rev=3681704) # Captchinoo, admin login page protection with Google recaptcha By [wp-buy](https://profiles.wordpress.org/wp-buy/) [Download](https://downloads.wordpress.org/plugin/captchinoo-captcha-for-login-form-protection.4.3.zip) * [Details](https://tah.wordpress.org/plugins/captchinoo-captcha-for-login-form-protection/#description) * [Reviews](https://tah.wordpress.org/plugins/captchinoo-captcha-for-login-form-protection/#reviews) * [Installation](https://tah.wordpress.org/plugins/captchinoo-captcha-for-login-form-protection/#installation) * [Development](https://tah.wordpress.org/plugins/captchinoo-captcha-for-login-form-protection/#developers) [Support](https://wordpress.org/support/plugin/captchinoo-captcha-for-login-form-protection/) ## Description Your login page is the single most attacked page on any WordPress site. Bots hit` wp-login.php` around the clock, guessing username and password combinations thousands of times a day. **Captchinoo** puts a human verification step in front of that form, so automated scripts are stopped before they ever reach your password check. Install it, pick the captcha style you like, and you are protected. There is nothing else to configure. **Three captcha styles, one click apart** * **Slide to unlock** — a lightweight swipe slider, just like unlocking a phone. No external service, no API keys, works on desktop and touch devices. * **Icon captcha** — the visitor picks the one icon that does not belong in the row. Friendly, image based, and no typing required. * **Google reCAPTCHA v2** — the familiar « I’m not a robot » checkbox, backed by Google’s own bot detection. **Why site owners choose Captchinoo** * **No puzzles to read.** No distorted letters and no math questions. Your users are not punished for logging in. * **Genuinely lightweight.** Only the assets for the captcha you actually selected are loaded, and only on the login page. Nothing is queued on the front end of your site. * **Works with caching.** The login page is never cached by page caching plugins, so Captchinoo stays reliable where other captcha plugins break. * **Translation ready.** Every string is translatable and the plugin ships with full text domain support. * **Zero configuration required.** The slide captcha works the moment you activate the plugin — no account, no keys, no signup. **Captchinoo Pro — three more ways to lock down your login** The free plugin gives you three captcha styles for your WordPress login form. [Captchinoo Pro](https://www.wp-buy.com/product/captchinoo-captcha-2fa-pro/#title) adds three stronger layers on top: * **Two factor authentication (2FA)** — the most powerful protection in the plugin. 2FA adds a second identity check on top of the password: the user confirms the login from their mobile device, so a stolen, leaked, or guessed password on its own is no longer enough to get into your site. * **Google reCAPTCHA v3** — invisible protection that never interrupts your users. Instead of asking anyone to click a box or solve a challenge, reCAPTCHA v3 scores each visitor silently in the background from their interactions with your site. You can run it everywhere without affecting your conversion rate, and it works best when it has the most context about how people use your site. * **hCaptcha** — an independent alternative to Google’s service. hCaptcha blocks automated bots, spam, and abuse by asking visitors to complete a simple verification challenge, and it is the popular choice for site owners who would rather not route their traffic through Google. Pro includes everything in the free version, so you can switch between all six captcha styles at any time. **External services** This plugin can optionally use Google reCAPTCHA, a third party service, and only when you explicitly select « Google reCAPTCHA » as your captcha type and enter your own API keys. When that option is active, the visitor’s browser loads Google’s reCAPTCHA script from `https://www.google.com/recaptcha/api.js`, and your server sends the captcha response token together with the visitor’s IP address to `https://www.google.com/ recaptcha/api/siteverify` in order to confirm the challenge was solved. No data is transmitted to Google when the Slide or Icon captcha is selected, and the plugin never sends data anywhere else. Google’s terms and privacy policy apply to that service: [Terms of Service](https://policies.google.com/terms)— [Privacy Policy](https://policies.google.com/privacy). **Support** If you have a problem, a question, or a feature request, please open a thread in the support forum. We answer every one. If Captchinoo helps keep your site safe, a review would mean a lot to us. ## Screenshots [⌊The Slide to unlock captcha on the WordPress login form.⌉⌊The Slide to unlock captcha on the WordPress login form.⌉[ The Slide to unlock captcha on the WordPress login form. [⌊The Icon captcha — select the image that does not belong in the row.⌉⌊The Icon captcha — select the image that does not belong in the row.⌉[ The Icon captcha — select the image that does not belong in the row. [⌊Google reCAPTCHA v2 on the login form.⌉⌊Google reCAPTCHA v2 on the login form.⌉[ Google reCAPTCHA v2 on the login form. ## Installation **Automatic installation** 1. Go to **Plugins > Add New** in your WordPress dashboard. 2. Search for **Captchinoo Captcha**. 3. Click **Install Now**, then **Activate**. 4. Go to **Captcha free** in the admin menu to choose your captcha type. **Manual installation** 1. Download the plugin `.zip` file. 2. Go to **Plugins > Add New > Upload Plugin**, choose the file, and click **Install Now**. 3. Activate the plugin. 4. Go to **Captcha free** in the admin menu to choose your captcha type. The Slide captcha is enabled by default and needs no further setup. If you prefer Google reCAPTCHA, see the FAQ below for how to get your API keys. ## FAQ ### Do I need a Google account or API keys to use this plugin? Not unless you want to. The **Slide to unlock** and **Icon** captcha styles work entirely on your own server with no account, no keys, and no external service. API keys are only required if you choose the Google reCAPTCHA option. ### How do I get my Google reCAPTCHA keys? Visit the [Google reCAPTCHA admin console](https://www.google.com/recaptcha/admin), register your domain, and choose **reCAPTCHA v2 « I’m not a robot » Checkbox**. Google will give you a **Site key** and a **Secret key**. Paste both into the plugin settings, then complete the verification step the plugin shows you. That last step confirms your keys actually work before the captcha goes live on your login page, so you can never lock yourself out with a wrong key. ### Which forms does this plugin protect? The free version protects the **WordPress login form** (`wp-login.php`), which is the form targeted by brute force and credential stuffing bots. Other login forms on your site, such as a WooCommerce « My Account » form or a custom form from another plugin, are not affected. ### The Icon captcha option is greyed out. Why? The Icon captcha generates images on the fly and needs the **PHP GD extension**, which is not enabled on your server. Ask your host to enable GD, or simply use the Slide or Google reCAPTCHA option instead — both work without it. ### I am locked out of my site. How do I disable the captcha? Connect to your site by FTP or your host’s file manager, go to `/wp-content/plugins/`, and rename the folder `captchinoo-captcha-for-login-form-protection` to anything else, for example `captchinoo-disabled`. WordPress will deactivate the plugin automatically and you can log in normally. This is why the plugin verifies your reCAPTCHA keys before enabling them — to prevent this situation in the first place. ### Will it slow down my site? No. Captchinoo loads nothing at all on the public pages of your site. Its scripts and styles are queued only on the login page, and only the ones belonging to the captcha style you selected. ### Does it work with caching plugins? Yes. WordPress login pages are excluded from page caching by every major caching plugin, so the captcha is always generated fresh and validated correctly. ### What does Captchinoo Pro add? Three additional protection layers on top of everything in the free version: **two factor authentication (2FA)**, which asks the user to confirm the login from their mobile device so a stolen password alone is not enough; **Google reCAPTCHA v3**, which scores visitors invisibly in the background without ever interrupting them or hurting your conversion rate; and **hCaptcha**, an independent alternative for site owners who prefer not to route traffic through Google. See [Captchinoo Pro](https://www.wp-buy.com/product/captchinoo-captcha-2fa-pro/#title) for details. ### Can I run the free version and Captchinoo Pro at the same time? No, and you do not need to. Activating the free version automatically deactivates the Pro version to prevent the two from conflicting. Pro contains everything the free plugin does, plus reCAPTCHA v3, hCaptcha, and 2FA. ### Is the plugin translation ready? Yes. All strings use the `captchinoo-captcha-for-login-form-protection` text domain and the plugin is ready for translation into any language. ### How can I report a security bug? Please contact us directly through [wp-buy.com](https://www.wp-buy.com/) rather than posting details in the public support forum, so the issue can be patched before it is disclosed. ## Reviews ![](https://secure.gravatar.com/avatar/9d2b46589c40ba92172d0b7dd6711f9018a698e768cfcceed61d23ab2b35b862? s=60&d=retro&r=g) ### 󠀁[Very nice plugin](https://wordpress.org/support/topic/very-nice-plugin-843/)󠁿 [vatarjaya](https://profiles.wordpress.org/vatarjaya/) février 13, 2021 I loved this plugin because could protect my login wordpress site from outsider. ![](https://secure.gravatar.com/avatar/1cb548dfa82cb501a9ca412c91e5ec88fd4028ff6b52419d34fb8924a2e85749? s=60&d=retro&r=g) ### 󠀁[A nice plugins to fall in love with!](https://wordpress.org/support/topic/a-nice-plugins-to-fall-in-love-with/)󠁿 [lash](https://profiles.wordpress.org/ranc007/) septembre 29, 2020 1 reply A nice plugins to fall in love with! ![](https://secure.gravatar.com/avatar/419fac4269fb9c3918a4bf3c79165dac9162266ae54b81517f06351d1f2f5252? s=60&d=retro&r=g) ### 󠀁[TRY IT, You Will Love IT](https://wordpress.org/support/topic/try-it-you-will-love-it/)󠁿 [CODEPRESS](https://profiles.wordpress.org/codepressplugins/) mars 19, 2020 TRY IT, You Will Love IT From First Time 🙂 Plugin Developer. [ Read all 3 reviews ](https://wordpress.org/support/plugin/captchinoo-captcha-for-login-form-protection/reviews/) ## Contributors & Developers “Captchinoo, admin login page protection with Google recaptcha” is open source software. The following people have contributed to this plugin. Contributors * [ wp-buy ](https://profiles.wordpress.org/wp-buy/) * [ mohmmed alagha ](https://profiles.wordpress.org/mohmmedalagha/) [Translate “Captchinoo, admin login page protection with Google recaptcha” into your language.](https://translate.wordpress.org/projects/wp-plugins/captchinoo-captcha-for-login-form-protection) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/captchinoo-captcha-for-login-form-protection/), check out the [SVN repository](https://plugins.svn.wordpress.org/captchinoo-captcha-for-login-form-protection/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/captchinoo-captcha-for-login-form-protection/) by [RSS](https://plugins.trac.wordpress.org/log/captchinoo-captcha-for-login-form-protection/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 4.3 * Security: fixed a login captcha bypass in the Slider (Swipe) captcha where the check could be skipped by omitting the captcha field. The token is now required, single-use, and rotated after every attempt. * Security: added a CSRF nonce to the Google reCAPTCHA « Verify & save » admin action. * Security: replaced the « administrator » role checks with the proper « manage_options» capability. * Hardening: reCAPTCHA verification now fails closed and is null-safe if Google is unreachable. * Compatibility: full PHP 8.3 support (null-safe array/property access, guarded sessions) and tested up to WordPress 7.1. * Cleanup: removed a leftover debug handler and normalized bundled library files. * Documentation: rewritten readme with a full FAQ and an external services disclosure. #### 4.2 * hCaptcha Support #### 4.1 * Fix some errors with slide captcha * Css fixes * JS fixes * Update google captcha help link * Interface update * check with the latest wordpress update #### 3.2 * check with the latest wordpress update #### 3.1 * Clean outputs #### 3.0 * Code fix & check with the latest wordpress update #### 2.5 * Code fix & check with the new wordpress update #### 2.4 * Code fix & check with the new 5.7 wordpress update #### 2.3 * Important fixing (PHP Short Array Syntax Error) in Google recaptcha #### 2.2 * Important fixing (PHP Short Array Syntax Error) #### 2.1.1 * Important fix for 1.9 update * Add links to dismiss the new start page links * Change the name of the plugin #### 1.9 * New advanced and easy to use starting page panel #### 1.8 * Review bar added #### 1.7 * Code fix * admin styles fix * Google captcha new option fix * Auto redierct after saving when use google captcha * Help added to enable google captcha simply #### 1.6 * Code fix * Add google captcha version 2 new feature #### 1.5 * Fix (slider captcha don’t touch on mobile devices) * Fix (slider captcha full slide action not doing any action) * Add about new tab * Change the translation text domain to be the same as the plugin main slug captchinoo- captcha-for-login-form-protection #### 1.4 * Change dropdown theme chooser to image chooser * Some fixes #### 1.3 * Activate function (icon captcha function), error fixed! #### 1.2 * Stop the (icon captcha function) because of not loading error #### 1.1 * Upload missing files by mistake #### 1.0 * initial version ## Meta * Version **4.3** * Last updated **1 mois ago** * Active installations **300+** * WordPress version ** 4.6 or higher ** * Tested up to **7.1.3** * PHP version ** 7.1 or higher ** * Language * [English (US)](https://wordpress.org/plugins/captchinoo-captcha-for-login-form-protection/) * Tags * [Brute Force](https://tah.wordpress.org/plugins/tags/brute-force/)[captcha](https://tah.wordpress.org/plugins/tags/captcha/) [login](https://tah.wordpress.org/plugins/tags/login/)[login security](https://tah.wordpress.org/plugins/tags/login-security/) [recaptcha](https://tah.wordpress.org/plugins/tags/recaptcha/) * [Advanced View](https://tah.wordpress.org/plugins/captchinoo-captcha-for-login-form-protection/advanced/) ## Ratings 5 out of 5 stars. * [ 3 5-star reviews ](https://wordpress.org/support/plugin/captchinoo-captcha-for-login-form-protection/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/captchinoo-captcha-for-login-form-protection/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/captchinoo-captcha-for-login-form-protection/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/captchinoo-captcha-for-login-form-protection/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/captchinoo-captcha-for-login-form-protection/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/captchinoo-captcha-for-login-form-protection/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/captchinoo-captcha-for-login-form-protection/reviews/) ## Contributors * [ wp-buy ](https://profiles.wordpress.org/wp-buy/) * [ mohmmed alagha ](https://profiles.wordpress.org/mohmmedalagha/) ## Support Issues resolved in last two months: 0 out of 1 [View support forum](https://wordpress.org/support/plugin/captchinoo-captcha-for-login-form-protection/)