greyfu

Greyfu Login Captcha adds a secure verification step to your WordPress login form, helping block automated login attempts and brute-force attacks.
Lite Version (Free): 
* Simple math-based captcha 
* Multisite compatible 
* Lightweight and fast 
* No personal data stored or transmitted 
* Works without any external service
Pro-Ready Features (Optional Upgrade): 
* Infrastructure prepared for reCAPTCHA v2 integration 
* Infrastructure prepared for hCaptcha integration 
* API key fields included
The free version is fully functional on its own and does not require any external captcha service.
<h3>Third Party Services</h3>
This plugin optionally connects to external captcha services when the Pro features are enabled:
Google reCAPTCHA (Optional) 
When reCAPTCHA is enabled in Pro settings, the plugin sends verification requests to Google’s reCAPTCHA service. 
– Service: https://www.google.com/recaptcha/ 
– Privacy Policy: https://policies.google.com/privacy 
– Terms of Service: https://policies.google.com/terms 
– Data sent: User’s IP address and reCAPTCHA response token 
– When: Only during login form submission when reCAPTCHA is enabled
hCaptcha (Optional) 
When hCaptcha is enabled in Pro settings, the plugin sends verification requests to hCaptcha service. 
– Service: https://www.hcaptcha.com/ 
– Privacy Policy: https://www.hcaptcha.com/privacy 
– Terms of Service: https://www.hcaptcha.com/terms 
– Data sent: User’s IP address and hCaptcha response token 
– When: Only during login form submission when hCaptcha is enabled
The free/lite version uses a built-in math captcha that does not connect to any external service.
<h3>Support / Contact</h3>
For issues or questions, please contact us: 
Email: hello@greyfu.com 
Website: https://greyfu.com

Greyfu Login Captcha

A lightweight captcha that protects your WordPress login page from automated bot attacks using a simple math challenge.

Jeff Sterup

This plugin allows you to automatically insert your Project Honeypot links into all of your pages and block IP addresses that are listed on the Http:BL list from Project Honeypot. There is an option to block IP addresses that have been blocked by Spamcop using their blacklist and the SANS Internet Storm Center API as well. 
To prevent bots from using brute force attacks and scanning your site there is an option to block users that fail to login a set number of times or use blocked user names. You can also block IP addresses that generate a large number of 404 errors. This plugin will also prevent WordPress User Enumeration and automatically block anyone attempting it.

Honeypot Toolkit


This plugin does the job very well. Besides using Project Honyepot and Spamcop, I really love the additional Login and 404 handling that protects from brute force attacks. In combination with a 2FA login plugin this makes me finally feel a lot safer using Wordpress. Thanks a lot!


Amazing! A must have for every site!

Automatically insert Project Honeypot links into your pages and block IP addresses that are listed on various block lists you can choose from.

Greyfu Login Captcha vs Honeypot Toolkit