ScriptsTown

Login Security Captcha is a security plugin for WordPress to add CAPTCHA or CAPTCHA-free services such as Cloudflare Turnstile and Google reCAPTCHA to the WordPress login, registration, lost password, and comment form. This is a fast and lightweight security plugin to place captcha on standard WordPress forms with minimal footprints. It can prevent spam comments and protect the login form against Brute-force attacks. It has simple settings to configure the plugin quickly.
The plugin supports Cloudflare Turnstile, Google reCAPTCHA Version 2, and Version 3 with multiple options. This is the best WordPress captcha plugin for antispam protection to secure comment form and WordPress login page. It allows you to place different versions of reCAPTCHA and also Turnstile on different forms at the same time. This plugin comes with a set of simple options to quickly set up captcha validation on the common forms.
Using this security plugin, you can change the captcha theme to light or dark depending on your preferences for Cloudflare Turnstile and Google reCAPTCHA. You can also configure various other parameters like the score value for reCAPTCHA version 3. You can monitor the error logs and have the option to disable the captcha on the comment form for logged-in users. Also, you can adjust the captcha size to compact or normal for Cloudflare Turnstile.
<h3>Login Security Captcha Features</h3>
<ul>
<li>Cloudflare Turnstile</li>
<li>Google reCAPTCHA v2</li>
<li>Google reCAPTCHA v3</li>
<li>Set reCAPTCHA v3 Position</li>
<li>Captcha Theme and Size</li>
<li>Secure Login Form</li>
<li>Secure Registration Form</li>
<li>Secure Lost Password Form</li>
<li>Protect Comment Spam</li>
<li>Monitor Error Logs</li>
<li>Prevent Brute-force Attack</li>
</ul>
Upgrade To Pro – <a href="https://scriptstown.com/wordpress-plugins/login-security-pro/#pricing" title="Upgrade To Pro" rel="nofollow ugc">Click Here</a>
<h3>Login Security Pro Features</h3>
<ul>
<li>Limit Login Attempts by IP Address</li>
<li>Check and Monitor Last Login</li>
<li>Check Login History by Username</li>
<li>Recent Login Dashboard Widget</li>
<li>Cloudflare Turnstile Support</li>
<li>Google reCAPTCHA v2 and v3</li>
<li>Redirect after Login or Logout</li>
<li>Role-Based Redirection</li>
<li>Secure Login and Registration Form</li>
<li>Secure Lost Password Form</li>
<li>Easy to Protect Comment Spam</li>
<li>Login Form – WooCommerce</li>
<li>Lost Password Form – WooCommerce</li>
<li>Registration Form – WooCommerce</li>
<li>Secure WooCommerce Checkout Form</li>
<li>Advanced Security and Much More</li>
</ul>
Check Pro Plugin – <a href="https://scriptstown.com/wordpress-plugins/login-security-pro/" title="Check Pro Plugin" rel="nofollow ugc">Click Here</a>

Login Security Captcha

Secure WordPress login, registration, and comment form with Google reCAPTCHA or Cloudflare Turnstile. Prevent Brute-force attacks and more.

Freemius

Emil Simunovic

Authica™ transforms your default WordPress login into a fully branded, secure, and user-friendly experience. 
Perfect for agencies, developers, and businesses that want both style and security.
Highlights: 
– Customizable Login Design — Add your logo, background, overlays, and Google Fonts. 
– Email Verification — Helps protect your site by requiring users to confirm their email address before they can log in. 
– Bot Protection — Cloudflare Turnstile & Google reCAPTCHA v2/v3 supported. 
– Hide / Rename wp-login.php — Block bots targeting the default login URL. 
– Login & Logout Redirects — Send users where you want after login/logout. 
– Security Logs & Alerts (coming soon) — Track login attempts and suspicious activity. 
– Brute Force Protection (coming soon) — Lock out suspicious login attempts automatically. 
– Two-Factor Authentication (TOTP) (coming soon) — Secure your accounts with app-based 2FA. 
– Socil Login (coming soon)
Authica’s free version includes full branding options, Google fonts, restore and backup 
Upgrade to Authica Pro for advanced and premium features.
Learn more: <a href="https://authica.net" rel="nofollow ugc">https://authica.net</a>
<h3>Contributors</h3>
emilsim (Emil Simunovic)
<h3>Privacy</h3>
This plugin uses an optional opt-in to collect non-sensitive diagnostic data and plugin usage information to help improve the product. The opt-in is presented on first use and can be changed at any time under Authica → Account.
Collected data may include: WordPress/site version, language, plugin/theme list and versions, admin email (for license/updates), and anonymized site URL. No personal content or passwords are collected.
Data is processed by our licensing/telemetry provider and by us for support and update delivery. 
• Provider’s Privacy & Terms: https://freemius.com/privacy/ , https://freemius.com/terms/
If you choose not to opt in, only the information required to deliver updates to your site is stored (license/installation ID, if you activate a license).
<h3>Current Features</h3>
Branding & Design 
– Upload your own logo 
– Customize colors, backgrounds, and overlays 
– Google Fonts 
– Live preview via WordPress Customizer
Security & Protection 
– Turnstile / reCAPTCHA integration 
– Email verification (Pro) 
– Hide/Rename wp-login.php (Pro) 
– Redirect Rules
User Experience 
– Custom welcome/error messages 
– Login & logout redirects 
– AJAX-powered login form 
– Mobile-first responsive design
<h3>External services</h3>
<h4>Cloudflare Turnstile (human verification)</h4>
This plugin can integrate with Cloudflare Turnstile to protect login, registration, and password-reset forms from automated abuse.
• What is it used for? 
 Turnstile provides a human verification widget to reduce bot signups and credential-stuffing attempts.
• What data is sent and when? 
 – On pages where the widget is shown, the Turnstile JavaScript file is loaded from 
 https://challenges.cloudflare.com/turnstile/v0/api.js. When loaded, Cloudflare 
 may receive standard browser/connection data (e.g., IP address, user agent, referrer) 
 and evaluate device/browser signals to determine risk, per Cloudflare’s documentation. 
 – When a verification token is produced by the widget, your WordPress site makes a 
 server-to-server request to: 
 https://challenges.cloudflare.com/turnstile/v0/siteverify 
 The server-to-server verification includes the user’s response token and your secret key. 
 When a valid client IP is available, the optional remoteip value may also be sent to Cloudflare to improve verification accuracy.
• Where can I learn more? 
 – Cloudflare Turnstile: https://www.cloudflare.com/products/turnstile/ 
 – Turnstile docs: https://developers.cloudflare.com/turnstile/ 
 – Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/ 
 – Cloudflare Terms of Service: https://www.cloudflare.com/terms/
• How do I disable it? 
 Turnstile integrations can be disabled at Authica → Bot Protection, which stops the 
 widget from loading and the verification endpoint from being called.
<h4>jsDelivr (Chart.js fallback, admin-only)</h4>
For the admin “Captcha Statistics” chart, this plugin prefers a local copy of Chart.js 
(bundled in <code>assets/vendor/chart.js/</code>). If the local file is not present, it falls back to 
loading Chart.js from: 
 https://cdn.jsdelivr.net/npm/chart.js@4.4.3/dist/chart.umd.min.js
• What data is sent? 
 Only the administrator’s browser requests the static script file from the CDN. 
 No user content or personal data is transmitted by this plugin as part of that request.
• How do I avoid the CDN? 
 Keep the local file at <code>assets/vendor/chart.js/chart.umd.min.js</code> so the fallback is not used.
<h4>Email delivery</h4>
This plugin uses WordPress <code>wp_mail()</code> to send email verification messages. Mail delivery 
is handled by your hosting provider or any SMTP/email plugin you configure. If you connect 
a third-party email service (e.g., via an SMTP plugin), that service’s privacy terms apply. 
This plugin does not send verification data to any email vendor on its own.
<h3>Trademark</h3>
Authica™ is a trademark claimed by Emil Simunovic. Registration pending. 
WordPress is a registered trademark of the WordPress Foundation, used under license.

Authica

Authica™ gives your WordPress site a fully branded and secure login experience.

Login Security Captcha vs Authica