ScriptsTown

Login Security Captcha is a security plugin for WordPress to add CAPTCHA or CAPTCHA-free services such as Cloudflare Turnstile and Google reCAPTCHA to the WordPress login, registration, lost password, and comment form. This is a fast and lightweight security plugin to place captcha on standard WordPress forms with minimal footprints. It can prevent spam comments and protect the login form against Brute-force attacks. It has simple settings to configure the plugin quickly.
The plugin supports Cloudflare Turnstile, Google reCAPTCHA Version 2, and Version 3 with multiple options. This is the best WordPress captcha plugin for antispam protection to secure comment form and WordPress login page. It allows you to place different versions of reCAPTCHA and also Turnstile on different forms at the same time. This plugin comes with a set of simple options to quickly set up captcha validation on the common forms.
Using this security plugin, you can change the captcha theme to light or dark depending on your preferences for Cloudflare Turnstile and Google reCAPTCHA. You can also configure various other parameters like the score value for reCAPTCHA version 3. You can monitor the error logs and have the option to disable the captcha on the comment form for logged-in users. Also, you can adjust the captcha size to compact or normal for Cloudflare Turnstile.
<h3>Login Security Captcha Features</h3>
<ul>
<li>Cloudflare Turnstile</li>
<li>Google reCAPTCHA v2</li>
<li>Google reCAPTCHA v3</li>
<li>Set reCAPTCHA v3 Position</li>
<li>Captcha Theme and Size</li>
<li>Secure Login Form</li>
<li>Secure Registration Form</li>
<li>Secure Lost Password Form</li>
<li>Protect Comment Spam</li>
<li>Monitor Error Logs</li>
<li>Prevent Brute-force Attack</li>
</ul>
Upgrade To Pro – <a href="https://scriptstown.com/wordpress-plugins/login-security-pro/#pricing" title="Get Pro Version" rel="nofollow ugc">Get Pro Version</a>
<h3>Login Security Pro Features</h3>
<ul>
<li>Limit Login Attempts by IP Address</li>
<li>Check and Monitor Last Login</li>
<li>Check Login History by Username</li>
<li>Recent Login Dashboard Widget</li>
<li>Cloudflare Turnstile Support</li>
<li>Google reCAPTCHA v2 and v3</li>
<li>Redirect after Login or Logout</li>
<li>Role-Based Redirection</li>
<li>Secure Login and Registration Form</li>
<li>Secure Lost Password Form</li>
<li>Easy to Protect Comment Spam</li>
<li>Login Form – WooCommerce</li>
<li>Lost Password Form – WooCommerce</li>
<li>Registration Form – WooCommerce</li>
<li>Secure WooCommerce Checkout Form</li>
<li>Advanced Security and Much More</li>
</ul>
Check Pro Plugin – <a href="https://scriptstown.com/wordpress-plugins/login-security-pro/" title="View Pro Features" rel="nofollow ugc">View Pro Features</a>

Login Security Captcha

Secure WordPress login, registration, and comment form with Google reCAPTCHA or Cloudflare Turnstile. Prevent Brute-force attacks and more.

Alexandre Alves

This plugin adds <a href="https://www.cloudflare.com/products/turnstile/" rel="nofollow ugc">Cloudflare Turnstile</a> — a free, privacy-friendly CAPTCHA alternative — to your WordPress site.
Its key difference from other Turnstile plugins is per-form control for Elementor Pro: instead of toggling Turnstile globally for every Elementor form, you add a “Cloudflare Turnstile” field to the specific forms you want to protect, exactly like Elementor’s built-in reCAPTCHA field. Forms without the field are left untouched. If you prefer the all-at-once approach, an optional setting protects every Elementor Pro form automatically.
<h4>Features</h4>
<ul>
<li>Per-form Turnstile field for Elementor Pro Forms — drag it into the forms you choose.</li>
<li>Optional “all Elementor Pro forms” switch — protect every Elementor Pro form at once, without adding the field to each one (off by default).</li>
<li>Optional protection for the built-in WordPress forms:
<ul>
<li>Login</li>
<li>Registration</li>
<li>Lost password</li>
<li>Comments</li>
</ul>
</li>
<li>One-click import of keys and settings from the “Simple Cloudflare Turnstile” plugin (no need to recreate your Cloudflare keys).</li>
<li>Global widget appearance settings (theme, size, visibility, language).</li>
<li>Strict server-side token verification (single-use tokens, 5-minute validity).</li>
<li>Secure-by-default behaviour: missing/invalid tokens are always blocked; the 
behaviour when Cloudflare itself is unreachable is configurable.</li>
<li>Write-only secret key (never displayed or sent to the browser).</li>
<li>Lightweight: in the default per-form mode, the Cloudflare script loads only on pages that actually show a widget. (The optional “all forms” mode loads it across the front end so late-loaded forms are covered.)</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>The Elementor field requires Elementor Pro (the Forms widget is a Pro feature). Without Elementor Pro, the WordPress form integrations still work.</li>
<li>A free Cloudflare Turnstile site key and secret key.</li>
</ul>
<h4>Third-party service</h4>
This plugin renders the official Cloudflare Turnstile widget and verifies tokens with Cloudflare.
<ul>
<li>When a protected form is displayed, the visitor’s browser loads <code>https://challenges.cloudflare.com/turnstile/v0/api.js</code> from Cloudflare.</li>
<li>
When a protected form is submitted, your server sends a request to <code>https://challenges.cloudflare.com/turnstile/v0/siteverify</code> containing: the Turnstile token from the widget (<code>cf-turnstile-response</code>), your secret key, and — unless disabled with the <code>cwebts_remoteip</code> filter — the visitor’s IP address (<code>REMOTE_ADDR</code>). The secret key is never sent to the browser.
</li>
<li>
Cloudflare Turnstile: https://www.cloudflare.com/products/turnstile/
</li>
<li>Terms of Service: https://www.cloudflare.com/website-terms/</li>
<li>Privacy Policy: https://www.cloudflare.com/privacypolicy/</li>
</ul>
<h4>About the name</h4>
The distinctive part of the name is CWeb Form Protection, after Collectif WEB, the agency that maintains this plugin. The trailing “with Turnstile for Elementor Forms” only describes what the plugin integrates with: “Turnstile” is the Cloudflare service it uses, and “for Elementor Forms” signals compatibility with Elementor’s Forms widget. This plugin is not affiliated with, sponsored by, or endorsed by Cloudflare, Inc. or Elementor Ltd.
<h4>Trademarks</h4>
Not affiliated with Cloudflare, Inc. or Elementor Ltd. “Cloudflare” and “Turnstile” are trademarks of Cloudflare, Inc. “Elementor” is a trademark of Elementor Ltd. These names are used only to describe compatibility.

CWeb Form Protection with Turnstile for Elementor Forms

Add Cloudflare Turnstile to your forms — with a per-form field for Elementor Pro so you choose exactly which forms are protected.

Login Security Captcha vs CWeb Form Protection with Turnstile for Elementor Forms