<div style="background: linear-gradient(135deg,#f8f9fa,#eef4ff);border-left: 5px solid #0b5ed7;padding: 16px 20px;margin: 16px 0;border-radius: 8px;font-size: 16px;font-weight: 600;color: #212529">🔐 Supports <strong>Google reCAPTCHA</strong>, <strong>Cloudflare Turnstile & hCaptcha</strong><br />
<span style="font-size: 14px;font-weight: 400;color: #495057"><br />
Choose a privacy-friendly or traditional CAPTCHA for your WooCommerce store</span></div>
<ul class="wccom-tick-list-primary">
<li>Support both Classic reCaptcha and enterprise reCaptcha</li>
<li>Support turnstile checkbox mode and hidden mode</li>
<li>Support HCaptcha checkbox mode and hidden mode(enterprise version)</li>
<li>Support both Classic Checkout and Checkout Block</li>
<li>Support both reCaptcha V2 (checkbox) and reCaptcha V3</li>
<li>Support hybrid reCaptcha (V3 as main reCaptcha and use V2 when V3 get fail so that user not blocked)</li>
<li>Protection from spam</li>
<li>Protection from unauthorised login attempts</li>
<li>Stop fake registrations</li>
<li>Stop fake guest orders</li>
<li>Low-friction, effortless interaction for users</li>
<li>Easy for customers, Hard for bots</li>
<li>Enable it to required places only</li>
</ul>
<h2><strong>Description</strong></h2>
<p>Security is the most important concern nowadays for any website or an eCommerce store. Because of automated tools and bots your site does not perform its best. There are lots of automated tools available to make your site spammy. Therefore any website or eCommerce site must have a captcha that protects from automated bots. Google Recaptcha “I am not a Robot” provides the best protection by involving human interaction to solve the captcha. The capacity to investigate and recognize gets to by bots from people, reCAPTCHA shields mechanized programming from hurting your site. Though, legitimate clients can in any case experience this shield.</p>
<p>reCaptcha for WooCommerce is the best solution that provides an all-in-one captcha for  WooCommerce as well as WordPress. There are easy settings given with on/off captcha on required places. The best thing about this plugin is highly built on WooCommerce as well as WordPress standard so that it can not break your site in any way.</p>
<p><strong>Now featuring Cloudflare Turnstile</strong>: We understand the need for choice and better user experience. That’s why we now integrate Cloudflare Turnstile, a privacy-conscious CAPTCHA that often works without puzzles or checkboxes, making verification faster and less intrusive for your legitimate customers.</p>
<p><strong data-start="1079" data-end="1106">Now featuring hCaptcha:</strong><br data-start="1106" data-end="1109" />We believe in giving you full control over your store’s security. With hCaptcha support, you can select a privacy-focused verification method that effectively blocks spam and automated abuse while maintaining a smooth user experience.</p>
<p><img class="alignnone wp-image-5322573 size-large" src="https://woocommerce.com/wp-content/uploads/2020/02/reCpatcha-for-WooCommerce.png?w=980" alt="" width="980" height="733" /></p>
<p><strong>Cloudflare Turnstile</strong></p>
<h2><img class="alignleft size-medium wp-image-18734006209196" src="https://woocommerce.com/wp-content/uploads/2020/02/Cloudflare-Turnstile-for-WooCommerce.png?w=896" alt="Cloudflare-Turnstile-for-WooCommerce" width="896" height="543" /></h2>
<h2></h2>
<p><strong>HCaptcha </strong></p>
<p><img class="alignleft size-medium wp-image-18734006316005" src="https://woocommerce.com/wp-content/uploads/2020/02/hCaptcha_For_WooCommerce.png?w=896" alt="hCaptcha_For_WooCommerce" width="896" height="652" /></p>
<h2></h2>
<h2><strong>Features</strong></h2>
<ul class="wccom-tick-list-secondary">
<li>login reCaptcha</li>
<li>registration reCaptcha</li>
<li>Lost password reCaptcha</li>
<li>Guest checkout reCaptcha</li>
<li>Login user checkout reCaptcha</li>
<li>Add payment method reCaptcha</li>
<li>WooCommerce pay for order captcha</li>
<li>WooCommerce Product review captcha</li>
<li>WooCommerce Track Order captcha</li>
<li>WordPress Comment form captcha</li>
<li>WP-Login reCaptcha</li>
<li>WP-Register reCaptcha</li>
<li>WP-Lost password reCaptcha</li>
<li>JetPack Forms reCaptcha</li>
<li>Custom label for reCaptcha</li>
<li>Custom error messages</li>
<li>Recaptcha dark/light theme</li>
<li>Captcha full/compact mode</li>
<li>Captcha language selection for V2.</li>
<li>Auto-detect user language</li>
<li>Disable submit button until captcha checked</li>
<li>Reset captcha on order postback error</li>
<li>Disable reCaptcha for IP/Range</li>
</ul>
<p><strong>New Feature</strong></p>
<p>ReCaptcha for WooCommerce now supports Checkout Block reCaptcha. Click here to check the full video on <a href="https://www.youtube.com/watch?v=AiEqw6nXYM8" target="_blank" rel="noopener">ReCaptcha For Chckout Block of WooCommerce</a></p>
<p><img class="alignleft wp-image-18734004457243 size-large" src="https://woocommerce.com/wp-content/uploads/2020/02/reCaptcha-for-Woocommerce-Checkout-block.png?w=573" alt="reCaptcha-for-Woocommerce-Checkout-block" width="573" height="860" /></p>

reCaptcha Integration

<p>Protect your eCommerce store from malicious and automated attacks by using reCaptcha/Cloudflare Turnstile/hCaptcha for WooCommerce.</p>

<h2>Security for WooCommerce:</h2>
<p>Fraudsters often use VPNs and proxies to hide their identities, putting eCommerce businesses at risk. <strong data-start="102" data-end="130">Security for WooCommerce</strong> helps you detect and block high-risk transactions by identifying masked locations and restricting purchases from countries you don’t sell to. While it strengthens your store’s security, it does not protect against velocity attacks. For advanced fraud prevention, check out <a href="//woocommerce.com/products/woocommerce-anti-fraud/" rel="noopener" data-start="404" data-end="431"> Anti-Fraud for Woocommerce</a>.</p>
<h2><strong>Key Features</strong></h2>
<div class="two-columns">
<p></p>
<div class="twocol-one">
<h3><strong>Restrict Sales to a Single Country</strong></h3>
<p>If your business operates domestically, you can limit sales to a single country to focus on your target market and block unwanted traffic from other regions.</p>
<p><img class="alignnone wp-image-18734004756467" src="https://woocommerce.com/wp-content/uploads/2022/11/AllowOnlyTrafficFromCountry.webp?w=896" alt="Allow Only Traffic From one Country" width="693" height="390" /></p>
</div>
<div class="twocol-one">
<h3><strong>Manually Allow or Block Individual IP Addresses</strong></h3>
<p>With<strong> Security for WooCommerce,</strong> you can manually manage IP access by blocking suspicious users or allowing trusted ones. Add problematic IPs to the Blacklist to prevent fraud, or Whitelist trusted users like admins or virtual assistants for seamless access. This ensures secure, controlled access while protecting your store.<img class="alignnone wp-image-18734004756439" src="https://woocommerce.com/wp-content/uploads/2022/11/RandomIps.webp?w=896" alt="restrict access to cart at checkout" width="693" height="390" /><br />
<strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Restrict Access to Cart and Checkout</strong></p>
<p>Enhances security by allowing you to restrict access to the cart and checkout pages based on a visitor’s country.</p>
<p><img class="alignnone wp-image-18734004756362" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictAccess.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Restrict Access at the Product Level</strong></h3>
<p>Strengthens security by allowing you to restrict access to a product based on a visitor’s country.</p>
<p><img class="alignnone wp-image-18734004756380" src="https://woocommerce.com/wp-content/uploads/2022/11/AccessAtProductLevel.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Category-Based Product Restrictions</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Allows precise control over product visibility by region. The </span><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Category<br />
Restrictions On/Off </strong><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">setting enables or disables category-based blocking, while </span><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Block Products by Category </strong><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">lets you restrict specific WooCommerce product categories for visitors from blocked countries, ensuring compliance and a tailored shopping experience.</span></p>
<p><img class="alignnone wp-image-18734004756400" src="https://woocommerce.com/wp-content/uploads/2022/11/CategoryOnOff.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">For Publicly Accessible Download Product Links</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Secure your downloadable products with IP-based access control. Choose <strong>Whitelist Mode</strong> to block specific IPs or <strong>Blacklist Mode</strong> to allow only approved IPs. Custom error messages ensure unauthorized downloads are prevented, providing extra protection and control for your WooCommerce store.</span></p>
<p><img class="alignnone wp-image-18734004756395" src="https://woocommerce.com/wp-content/uploads/2022/11/PublicAccessibleDownloadlinks.webp?w=896" alt="whitelisting and blacklisting toggles" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Block Visitors Access between Timeframe</strong></p>
</div>
</div>
</div>
</div>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Enables you to restrict order placement to specific timeframes, ideal for stores serving a particular country or region and aiming to prevent orders from unintended time zones or areas.</span></p>
<p><img class="alignnone wp-image-18734004756413" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictTimeFrame.webp?w=896" alt="block visitors access between timeframe toggle and time range" width="693" height="390" /></p>
<h3><strong style="font-family: var(--wccom-font-family-header);font-size: var(--wp--preset--font-size--paragraph-medium,18px);letter-spacing: -0.02em">Enhanced Site Protection</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em;font-size: 16px">The comprehensive WooCommerce Security plugin includes features to enhance site protection. It can hide the WordPress version number to prevent attackers from identifying version-specific vulnerabilities. Two-Factor Authentication (2FA) adds an extra layer of security by requiring a second verification step. Additionally, a passcode protection feature allows restricted access using a configured username and password. All features are disabled by default.</span></p>
</div>
<div class="twocol-one">
<div class="flex max-w-full flex-col flex-grow">
<p><img class="alignnone wp-image-18734004756423" src="https://woocommerce.com/wp-content/uploads/2022/11/EnhancedSiteProteciton.webp?w=896" alt="enhanced site protection toggles" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Scan Malware Manually</strong></p>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Enables on-demand malware scans for your WordPress site, detecting security threats, suspicious code, and compromised files. Users can initiate a detailed scan with one click, receiving results that include the last scan date, infected files with suspected line numbers, and total threats found. The scanner checks PHP files, detects malicious patterns, and compares files against malware signatures, with results stored in the WordPress database and displayed in a table.</span></p>
</div>
</div>
</div>
</div>
<p><img class="alignnone wp-image-18734004756432" src="https://woocommerce.com/wp-content/uploads/2022/11/ScanMalware.webp?w=896" alt="scan malware manually button" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light"><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Directory and File Protection Settings</strong></div>
<div>These features help keep your site’s folders and files private and secure.<strong> Directory Listing Protection</strong> blocks people from browsing your folders, while <strong>File Indexing Protection</strong> prevents search engines from displaying sensitive files. Together, they keep your file structure hidden and your content safe. Both are off by default but can be easily turned on for extra security.</div>
<div><img class="alignnone wp-image-18734004756429" src="https://woocommerce.com/wp-content/uploads/2022/11/PreventDirectory.webp?w=896" alt="Prevent direct access directory on/off toggle" width="693" height="390" /></div>
</div>
</div>
</div>
<div class="group/conversation-turn relative flex w-full min-w-0 flex-col agent-turn">
<div class="flex-col gap-1 md:gap-3">
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="7ba194b5-e21f-46a2-9ae8-e3f0af69f4c8" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p>The comprehensive <strong>Security for WooCommerce</strong> plugin ensures your website remains discoverable by allowing trusted search engine bots to index your site, even if they originate from blocked countries. You’ll receive <strong>email alerts</strong> whenever a blocked visitor attempts to log in via WP-Admin. Designed to help WooCommerce businesses block unwanted traffic, this plugin allows you to focus on serving genuine customers.</p>
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Block Visitors Access between Timeframe</strong></p>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Empowers you to restrict order placement to specific timeframes, ideal for stores serving a particular country or region and aiming to prevent orders from unintended time zones or areas.</span></p>
<p><img class="alignnone wp-image-18734004756413" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictTimeFrame.webp?w=896" alt="Block visitors access between timeframe toggle" width="693" height="390" /></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div class="twocol-one last"></div>
</div>

Security

<h3>Stop Location Spoofing & Block VPN/Proxy Fraudsters</h3>

reCaptcha Integration vs Security