captchaapi

Protects WooCommerce (login, registration, lost password, checkout), WPForms, Fluent Forms, Formidable Forms, Forminator and Contact Form 7 – cookieless, EU-hosted, no cookie banner required.
A privacy-first alternative to reCAPTCHA: captchaapi.eu stops form spam without making your visitors click traffic lights. A free tier with commercial use allowed gets you started. The work happens in the background: the visitor’s browser solves a small proof-of-work puzzle while they fill in the form, and a signed token rides along with the submission. There is nothing to solve and nothing to see.
Your server checks that token locally with your secret key. No request is sent back to captchaapi.eu when a form is submitted, so the check adds no network latency and keeps working even if our service is briefly unreachable.
The service runs on hardware in the EU (Nuremberg, Germany). It sets no cookies and writes no per-visitor record to a database; the visitor’s IP address is used only transiently for rate limiting and abuse detection.
<h4>What it protects</h4>
<ul>
<li>Login (wp-login.php and WooCommerce)</li>
<li>Registration (WordPress and WooCommerce)</li>
<li>Lost password (WordPress and WooCommerce)</li>
<li>Comments</li>
<li>WooCommerce checkout</li>
<li>Contact Form 7</li>
<li>WPForms</li>
<li>Fluent Forms</li>
<li>Formidable Forms</li>
<li>Forminator</li>
</ul>
Each surface can be turned on or off from the settings screen. Integration options for Contact Form 7, WooCommerce, and the supported form plugins appear only when that plugin is active.
<h4>How it works</h4>
<ol>
<li>The widget loads on the pages with a protected form and solves a proof-of-work puzzle in a Web Worker.</li>
<li>On submit, it attaches a short-lived, signed attestation to the form.</li>
<li>The plugin verifies the attestation with your secret key (an HMAC check) and rejects the submission if it is missing, forged, expired, or reused.</li>
</ol>
Reuse is blocked with a single-use record per token. If your site has a persistent object cache (Redis or Memcached), that record lives there. Otherwise the plugin keeps a small table and clears expired rows on a schedule.
<h4>You need an account</h4>
This plugin connects to the captchaapi.eu service. Create a project at https://captchaapi.eu to get a site key and a secret key. A free tier is available.
<h3>External services</h3>
This plugin connects to captchaapi.eu, a third-party CAPTCHA service, to protect your forms from spam. It is required for the plugin to function.
On any public page that contains a protected form, the plugin loads the service’s widget script (captcha.js) from your configured captchaapi.eu endpoint. The visitor’s browser then communicates with the captchaapi.eu API to perform a proof-of-work challenge and obtain a signed attestation that is attached to the form on submit. This happens for every visitor who loads a protected form.
To issue and validate an attestation the service receives your public site key, the proof-of-work result, and – as with any HTTP request – the visitor’s IP address. The IP address is used for rate limiting and abuse/bot detection (including a coarse, IP-derived country) and is processed transiently: a hashed form and aggregate counters are held briefly in a cache. No raw IP address and no per-visitor record are written to a database. The service sets no cookies. Data is processed on servers in the EU (Nuremberg, Germany).
Verification of the attestation on submit is performed locally on your server with your secret key; no request is sent back to captchaapi.eu at that point.
<ul>
<li>Service provider: captchaapi.eu</li>
<li>Terms of Service: https://captchaapi.eu/legal/terms</li>
<li>Privacy Policy: https://captchaapi.eu/legal/privacy</li>
</ul>

GDPR Cookieless CAPTCHA for WooCommerce & Forms – captchaapi.eu

Cookieless, EU-hosted reCAPTCHA alternative for WooCommerce, WPForms, Fluent Forms & CF7. GDPR-clean, no cookie banner.

jmviade

reCAPTCHA in WP comments form plugin is an ANTISPAM tool that adds the visible Google reCAPTCHA field inside the comments form of your WP theme when the user is not logged in preventing fraudulent or deceptive comments.
The plugin also introduces a second verification process that detects the unauthorized direct accesses by spam robots to the WP comments system and allows you to decide what do you want to do with those comments.
Finally, the plugin has got an optional forced javascript output mode that lets you to add a reCAPTCHA field also in old WP themes that didn’t use the new WP form comments functions but they make a direct output of its own comments form.
<h4>FEATURES LIST</h4>
Basic Features
<ul>
<li>All variants of Google reCAPTCHA field are available</li>
<li>Two simple steps Installation Wizard</li>
<li>Automatic default configuration settings for all plugin components</li>
<li>Automatic default configuration for reCAPTCHA field</li>
<li>Configuration settings for Plugin </li>
<li>Configuration settings for ANTISPAM operation</li>
<li>Four modes of operation in case of spam robots threats (SPAM, TRASH, DELETE or DIE)</li>
<li>Visual configuration settings for Google reCAPTCHA: theme, size, type, align, language</li>
<li>Dynamic comments form sample for viewing configuration settings changes</li>
<li>Visual Help</li>
<li>RTL Language support</li>
<li>Admin Color scheme adapted</li>
</ul>
Middle features
<ul>
<li>Forced language option for reCAPTCHA field</li>
<li>Plugin blocks the submit button while reCAPTCHA field is not verified</li>
<li>Plugin changes HTML structure of the comments form to prevent malicious automatic sendings while reCAPTCHA field is not verified</li>
<li>Plugin also blocks other elements with <code>[type=submit]</code> inside form in case of a theme customized comments form</li>
<li>Plugin lets you to write your own additional CSS for the reCAPTCHA field</li>
<li>New restore default value buttons in plugin configuration section for helping you in case of changing WP theme, accidental errors, test environtments, etc.</li>
</ul>
Advanced features
<ul>
<li>reCAPTCHA verification process via AJAX before submitting the form</li>
<li>Second security checking process for preventing any security breach before saving the comment</li>
<li>Supporting four different WP comments form HTML structure types</li>
<li>Advanced plugin options based on HTML queries for inserting the reCAPTCHA plugin in all kinds of WP themes</li>
<li>Optional Forced javascript output that allows you to use the plugin with old WP themes that didn’t use function <code>comment_form()</code></li>
<li>Advanced ID’s tags settings for using this plugin with WP Themes that creates its own comments form HTML struct</li>
<li>reCAPTCHA javascript initialization that prevents reCAPTCHA conflicts in case of that other plugins use reCAPTCHA.</li>
<li>New mínimum CSS styles for recaptcha alignment</li>
</ul>
<h4>PLUGIN PAGE</h4>
To learn more about the plugin, visit the <a href="http://www.joanmiquelviade.com/plugin/google-recaptcha-in-wp-comments-form/" title="Author's plugin page" rel="nofollow ugc">Plugin page</a>.

reCAPTCHA in WP comments form

reCAPTCHA in WP comments form is an ANTISPAM tool that adds a Google reCAPTCHA to the comments form and protects your site from the spam robots threat …

GDPR Cookieless CAPTCHA for WooCommerce & Forms – captchaapi.eu vs reCAPTCHA in WP comments form