wpgear

Adaptive Login Form: Adjusting compromise between Comfort and Paranoia.
Conception: 
1. “Zero Trust Mode” 
Recommended for small groups of regular Users with a Static IP Address. 
Not recommended for Dynamic IP Addresses or Mobile Users.
If my current IP address is not marked as Dangerous since my last successful login, then there is no need to distrust me and force me to go through Quests to solve different types of Captchas. 
In this case, the standard “Password” field is sufficient for one attempt.
But if the Attempt is unsuccessful, then we mark the IP address as Dangerous, and then it is possible and necessary to trick me (or the one who is trying to be me) with a more thorough login procedure.
There may be multilevel options. It doesn’t matter (this will be gradually added to the functionality). We are now talking about the General Principle.
Separate statistics are generated for each IP address and the ratio “Successful number of entries” / “Total number of entries” is determined. Depending on how close this parameter is to 100%, we can talk about the need for the Toughness of the Mistrust process.
This mechanism starts before the User enters his Login.
The more Unsuccessful Login attempts occur from a given IP Address, the more thoroughly it is checked. 
Conversely, the Login procedure can be simplified as much as possible if there is no obvious reason.
<ol>
<li>“Dynamics IP Mode” 
Recommended for mobile Users with a Dynamic IP Address. 
Not recommended for Static IP Addresses.</li>
</ol>
If the User’s previous login was successful, their next authentication is performed using a simplified method. 
Simply enter the correct password. However, only one attempt is allowed. 
If the password was entered incorrectly, an additional security element is added to the login form: the “Secret Key” field.
<h4>Futured</h4>
<ul>
<li>Regardless of what kind of Authentication Error occurred, be it:</li>
<li>Invalid Username;</li>
<li>Invalid User Password;</li>
<li>Incorrectly specified additional security elements: “Secret Key” / Captcha / etc. 
This will not be indicated in the error message. There will always be only one message: “Authentication Failed”. 
Thus, we do not explicitly indicate to the potential Villain / Bot the reason for the denial of access. And the more such Reasons there are, the more complicated the Entry procedure becomes.</li>
<li>If multiple consecutive unsuccessful login attempts occur, a Restrictive Timeout may be activated for the given User.</li>
<li><a href="https://wordpress.org/plugins/new-users-monitor/" rel="ugc">Integration with “New Users Monitor”</a></li>
</ul>

Adaptive Login Action

Adaptive Login Form: Adjusting compromise between Comfort and Paranoia.

WebFactory

Nilambar Sharma

Manesh Timilsina

WP Concern

<a href="https://getwpcaptcha.com/" rel="nofollow ugc">Advanced Google reCAPTCHA</a> protects your WordPress site from spam comments & brute force login attacks using captcha. This captcha plugin, quickly adds Google reCAPTCHA and other captcha tests to WordPress comment form, login form, and other forms.
Using Advanced Google reCAPTCHA (most popular captcha on the market), you’ll be safe from spam comments and protect user accounts, WooCommerce, Easy Digital Downloads, BuddyPress and other forms from brute-force login attacks.
reCaptcha works for:
<ul>
<li>Login Form</li>
<li>Registration Form</li>
<li>Reset Password Form</li>
<li>Comment Form</li>
<li>BuddyPress Form</li>
<li>WooCommerce Form</li>
<li>Easy Digital Downloads (EDD) Login Form</li>
<li>Easy Digital Downloads (EDD) Registration Form</li>
</ul>
Captcha uses these 3rd party libs:
<ul>
<li>Chart.js, 2017 Nick Downie, MIT</li>
<li>DataTables, 2008-2017 SpryMedia Ltd, MIT</li>
<li>moment.js, Tim Wood, Iskren Chernev, MIT</li>
<li>SweetAlert 2, github.com/Sweetalert2/Sweetalert2, MIT</li>
<li>tooltipster, www.heteroclito.fr/modules/tooltipster/, MIT</li>
</ul>

Advanced Google reCAPTCHA

It meets all expectations to have recaptcha in custom pages/login page

Recaptcha in all pages

Works great!


It's really help and working for me in WordPress and woo commerce forms.



thanks. 


The Best free recaptcha plugin


Setting up the Advanced Google reCAPTCHA plugin was a breeze. The developers have done an outstanding job in simplifying the integration process. With clear instructions and user-friendly options, I was up and running in no time.


A Game-Changer for Website Security

well for my all website


Works great and it is easy to configure. Be careful if you programmatically log users into your site, because the captcha will have to be resolved.


Simple and powerful


This plugin is awesome --- It successfully blocked out bots from my site with reCAPTCHA.



But with v3, the plugin tends to load the captcha even if there is only a search form. I tried disable the captcha for comments but it still loads. I didn't test v2 since I don't have a v2 key.


Great plugin, but v3 support isn't very well

Great Plugin

Great


After Install this Plugin I am not able to login with my username and password It is may be changing my login details ...Do not Install ... I am requesting the developer to make a quick fix for this ... 


After Install This Plugin Now I am not able to Login

Captcha protection against spam comments & brute force login attacks using Google reCAPTCHA.

Adaptive Login Action vs Advanced Google reCAPTCHA