<h2>Security for WooCommerce:</h2>
<p>Fraudsters often use VPNs and proxies to hide their identities, putting eCommerce businesses at risk. <strong data-start="102" data-end="130">Security for WooCommerce</strong> helps you detect and block high-risk transactions by identifying masked locations and restricting purchases from countries you don’t sell to. While it strengthens your store’s security, it does not protect against velocity attacks. For advanced fraud prevention, check out <a href="//woocommerce.com/products/woocommerce-anti-fraud/" rel="noopener" data-start="404" data-end="431"> Anti-Fraud for Woocommerce</a>.</p>
<h2><strong>Key Features</strong></h2>
<div class="two-columns">
<p></p>
<div class="twocol-one">
<h3><strong>Restrict Sales to a Single Country</strong></h3>
<p>If your business operates domestically, you can limit sales to a single country to focus on your target market and block unwanted traffic from other regions.</p>
<p><img class="alignnone wp-image-18734004756467" src="https://woocommerce.com/wp-content/uploads/2022/11/AllowOnlyTrafficFromCountry.webp?w=896" alt="Allow Only Traffic From one Country" width="693" height="390" /></p>
</div>
<div class="twocol-one">
<h3><strong>Manually Allow or Block Individual IP Addresses</strong></h3>
<p>With<strong> Security for WooCommerce,</strong> you can manually manage IP access by blocking suspicious users or allowing trusted ones. Add problematic IPs to the Blacklist to prevent fraud, or Whitelist trusted users like admins or virtual assistants for seamless access. This ensures secure, controlled access while protecting your store.<img class="alignnone wp-image-18734004756439" src="https://woocommerce.com/wp-content/uploads/2022/11/RandomIps.webp?w=896" alt="restrict access to cart at checkout" width="693" height="390" /><br />
<strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Restrict Access to Cart and Checkout</strong></p>
<p>Enhances security by allowing you to restrict access to the cart and checkout pages based on a visitor’s country.</p>
<p><img class="alignnone wp-image-18734004756362" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictAccess.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Restrict Access at the Product Level</strong></h3>
<p>Strengthens security by allowing you to restrict access to a product based on a visitor’s country.</p>
<p><img class="alignnone wp-image-18734004756380" src="https://woocommerce.com/wp-content/uploads/2022/11/AccessAtProductLevel.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Category-Based Product Restrictions</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Allows precise control over product visibility by region. The </span><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Category<br />
Restrictions On/Off </strong><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">setting enables or disables category-based blocking, while </span><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Block Products by Category </strong><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">lets you restrict specific WooCommerce product categories for visitors from blocked countries, ensuring compliance and a tailored shopping experience.</span></p>
<p><img class="alignnone wp-image-18734004756400" src="https://woocommerce.com/wp-content/uploads/2022/11/CategoryOnOff.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">For Publicly Accessible Download Product Links</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Secure your downloadable products with IP-based access control. Choose <strong>Whitelist Mode</strong> to block specific IPs or <strong>Blacklist Mode</strong> to allow only approved IPs. Custom error messages ensure unauthorized downloads are prevented, providing extra protection and control for your WooCommerce store.</span></p>
<p><img class="alignnone wp-image-18734004756395" src="https://woocommerce.com/wp-content/uploads/2022/11/PublicAccessibleDownloadlinks.webp?w=896" alt="whitelisting and blacklisting toggles" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Block Visitors Access between Timeframe</strong></p>
</div>
</div>
</div>
</div>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Enables you to restrict order placement to specific timeframes, ideal for stores serving a particular country or region and aiming to prevent orders from unintended time zones or areas.</span></p>
<p><img class="alignnone wp-image-18734004756413" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictTimeFrame.webp?w=896" alt="block visitors access between timeframe toggle and time range" width="693" height="390" /></p>
<h3><strong style="font-family: var(--wccom-font-family-header);font-size: var(--wp--preset--font-size--paragraph-medium,18px);letter-spacing: -0.02em">Enhanced Site Protection</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em;font-size: 16px">The comprehensive WooCommerce Security plugin includes features to enhance site protection. It can hide the WordPress version number to prevent attackers from identifying version-specific vulnerabilities. Two-Factor Authentication (2FA) adds an extra layer of security by requiring a second verification step. Additionally, a passcode protection feature allows restricted access using a configured username and password. All features are disabled by default.</span></p>
</div>
<div class="twocol-one">
<div class="flex max-w-full flex-col flex-grow">
<p><img class="alignnone wp-image-18734004756423" src="https://woocommerce.com/wp-content/uploads/2022/11/EnhancedSiteProteciton.webp?w=896" alt="enhanced site protection toggles" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Scan Malware Manually</strong></p>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Enables on-demand malware scans for your WordPress site, detecting security threats, suspicious code, and compromised files. Users can initiate a detailed scan with one click, receiving results that include the last scan date, infected files with suspected line numbers, and total threats found. The scanner checks PHP files, detects malicious patterns, and compares files against malware signatures, with results stored in the WordPress database and displayed in a table.</span></p>
</div>
</div>
</div>
</div>
<p><img class="alignnone wp-image-18734004756432" src="https://woocommerce.com/wp-content/uploads/2022/11/ScanMalware.webp?w=896" alt="scan malware manually button" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light"><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Directory and File Protection Settings</strong></div>
<div>These features help keep your site’s folders and files private and secure.<strong> Directory Listing Protection</strong> blocks people from browsing your folders, while <strong>File Indexing Protection</strong> prevents search engines from displaying sensitive files. Together, they keep your file structure hidden and your content safe. Both are off by default but can be easily turned on for extra security.</div>
<div><img class="alignnone wp-image-18734004756429" src="https://woocommerce.com/wp-content/uploads/2022/11/PreventDirectory.webp?w=896" alt="Prevent direct access directory on/off toggle" width="693" height="390" /></div>
</div>
</div>
</div>
<div class="group/conversation-turn relative flex w-full min-w-0 flex-col agent-turn">
<div class="flex-col gap-1 md:gap-3">
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="7ba194b5-e21f-46a2-9ae8-e3f0af69f4c8" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p>The comprehensive <strong>Security for WooCommerce</strong> plugin ensures your website remains discoverable by allowing trusted search engine bots to index your site, even if they originate from blocked countries. You’ll receive <strong>email alerts</strong> whenever a blocked visitor attempts to log in via WP-Admin. Designed to help WooCommerce businesses block unwanted traffic, this plugin allows you to focus on serving genuine customers.</p>
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Block Visitors Access between Timeframe</strong></p>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Empowers you to restrict order placement to specific timeframes, ideal for stores serving a particular country or region and aiming to prevent orders from unintended time zones or areas.</span></p>
<p><img class="alignnone wp-image-18734004756413" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictTimeFrame.webp?w=896" alt="Block visitors access between timeframe toggle" width="693" height="390" /></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div class="twocol-one last"></div>
</div>

Security

<h3>Stop Location Spoofing & Block VPN/Proxy Fraudsters</h3>

<blockquote>
<h1 style="text-align: center">Protect Your Site With reCaptcha</h1>
</blockquote>
<p><span style="font-weight: 400">With the WooCommerce reCaptcha extension, you can add Google reCaptcha to WordPress and WooCommerce login, registration, password pages, checkout, comments, and more. You can also add reCaptcha on any page using the shortcode. The extension supports v2 and v3 versions of Google Invisible captcha.</span></p>
<p><span style="font-weight: 400">With increased spam and hacking attempts, the extension can act as an extra security gate to block bot traffic from making login attempts, checkouts, card checking, password resets, spam comments, and more. </span></p>
<p><span style="font-weight: 400">By using the invisible reCaptcha v3 version, you ensure that the captcha only appears to suspicious visitors and remains hidden from your valuable and real customers. You can also customize the spam score of V3 reCaptcha as per your website’s needs.</span></p>
<div class="woo-sc-box normal" style="text-align: center;background-color: #ffc4bd"><b>Attention!</b><br />
To prevent your WooCommerce stores from the ongoing surge in carding attacks and fraudulent transactions, it is highly advised to use <a href="https://woocommerce.com/products/anti-fraud-shield-for-woocommerce/">Anti-Fraud Shield</a> in Combination with <a href="https://woocommerce.com/products/google-recaptcha-for-woocommerce/">Google reCaptcha for WooCommerce</a>.</div>
<p><img class="alignnone size-full wp-image-18734004579813" src="https://woocommerce.com/wp-content/uploads/2021/03/bnr.jpg" alt="google recaptcha for woocommerce" width="901" height="105" /></p>
<h2>Now with Checkout Rate Lmiter – Ultimate Solution for Carding Attacks (<strong>New</strong>)</h2>
<p>Limit manual carding testing attacks in your WooCommerce store using checkout rate-limiting technology. While reCaptcha stops bot-based carding attempts by recognizing the repeating patterns, the rate limiter will now complement reCaptcha by restricting users from making multiple checkout attempts within a specified period. This makes Google reCaptcha for WooCommerce the ultimate solution for all sorts of carding attempts. With the checkout rate limiter’s enhanced settings, you can:</p>
<ul>
<li>Add rate limiter limits</li>
<li>Add time for which the place order button will be disabled when all attempts are exhausted</li>
<li>Add an error message to show when the rate limiter is triggered</li>
<li>Add IPs for which rate limiter will be disabled</li>
<li>Add IPs for which the place order button will be disabled</li>
<li>Add emails for which the place order button will be disbaled</li>
<li>Add user roles for which rate limiter will be disabled</li>
</ul>
<p><img class="alignnone size-full wp-image-18734004977215" src="https://woocommerce.com/wp-content/uploads/2021/03/recaptcha-for-woocommerce-129865.png" alt="recaptcha for woocommerce" width="980" height="575" /></p>
<h2>Features of WooCommerce reCaptcha:</h2>
<ul>
<li style="list-style-type: none">
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Supports v2 and v3 versions</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Activate reCaptcha individually on certain pages</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Customize reCaptcha sizes</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Choose between dark and light reCaptcha themes</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Disable reCaptcha for specific countries</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Excludes a specific IP range</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Add reCaptcha anywhere using shortcode</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Customize spam score for V3 recaptcha</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Activate reCaptcha on the following WooCommerce pages: </span>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">WooCommerce Registration</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">WooCommerce Login<br />
</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">WooCommerce Lost Password </span></li>
<li style="font-weight: 400"><span style="font-weight: 400">WooCommerce Checkout<br />
</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Payment Method </span></li>
<li><span style="font-weight: 400">Pay for the Order </span></li>
<li><span style="font-weight: 400">Product Review </span></li>
</ul>
</li>
</ul>
</li>
<li><span style="font-weight: 400">Enable reCaptcha on the following WordPress pages: </span>
<ul>
<li style="list-style-type: none">
<ul>
<li><span style="font-weight: 400">WordPress Registration </span></li>
<li><span style="font-weight: 400">Lost WordPress Password </span></li>
<li><span style="font-weight: 400">WordPress Comments</span></li>
</ul>
</li>
</ul>
</li>
<li><span style="font-weight: 400">Multilingual translation ready</span></li>
<li><span style="font-weight: 400">Expands captcha options with support for reCaptcha.net</span></li>
</ul>
<p><img class="alignnone size-full wp-image-18734004460826" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-5.png" alt="google recaptcha for woocommerce" width="980" height="414" /></p>
<h2>Supports V2 and V3 reCaptcha</h2>
<p><span style="font-weight: 400">With Google reCaptcha for WooCommerce, you can add V2 and V3 reCaptcha to your store – providing a strong solution for authenticating and validating customers who visit your online store. </span></p>
<p><span style="font-weight: 400">V2 recaptcha remains visible for everyone, whereas the V3 recaptcha appears only when suspicious traffic is detected and remains hidden for your real customers.</span></p>
<p><img class="alignnone size-full wp-image-18734004446735" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-2.png" alt="" width="980" height="647" /></p>
<h2><span data-preserver-spaces="true">Customize reCaptcha for each WooCommerce and WordPress Page<br />
</span></h2>
<ul>
<li><span style="font-weight: 400">The extension allows you to enable reCaptcha on specific WooCommerce and WordPress pages. You can also customize the following reCaptcha options for each page:</span>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Field Title</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Themes (light or dark)</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Size (normal or compact</span></li>
</ul>
</li>
</ul>
<p><img class="alignnone size-full wp-image-18734004446739" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-3.png" alt="" width="980" height="701" /></p>
<h2><span data-preserver-spaces="true">Add reCaptcha using Shortcode</span></h2>
<p><span style="font-weight: 400">Integrating Google reCaptcha into your website is made even more versatile with the inclusion of a shortcode feature. By enabling the Shortcode reCaptcha option, you can make any page of your website secure by reCaptcha by adding a shortcode </span><b>[captcha_shortcode] </b><span style="font-weight: 400">on any desired page</span><b>.</b></p>
<p><img class="alignnone size-full wp-image-18734004446742" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-4.png" alt="" width="980" height="772" /></p>
<h2><span data-preserver-spaces="true">Supports reCaptcha.net</span></h2>
<p><span style="font-weight: 400">This WooCommerce reCaptcha extension provides advanced security measures and customization options for online stores. You can choose between Google.com and reCaptcha.net as the preferred reCAPTCHA type. The reCaptcha.net is preferable for countries where Google is blocked. The “No-Conflict Mode” ensures seamless integration by removing other CAPTCHA occurrences on that page to avoid site-breaking conflicts. </span></p>
<h2><span data-preserver-spaces="true">General Settings</span></h2>
<p><span style="font-weight: 400">With additional customization options such as Recaptcha Field Title and a choice between Light and Dark themes, as well as Normal or Compact size, website administrators can seamlessly align reCaptcha with their site’s aesthetics and user experience preferences. </span></p>
<p><span style="font-weight: 400">The plugin allows the exclusion of specific countries and the option to disable reCAPTCHA for designated IP ranges, offering a tailored and robust security solution for WooCommerce websites.</span></p>
<p><img class="alignnone size-full wp-image-18734004446744" src="https://woocommerce.com/wp-content/uploads/2021/03/google-recaptcha-for-woocommerce-6.png" alt="" width="980" height="908" /></p>
<h2>Why Google reCaptcha for WooCommerce?</h2>
<p><img class="aligncenter wp-image-18734003260578 size-full" src="https://woocommerce.com/wp-content/uploads/2021/03/Google-recaptcha-blog-2x-2.png" alt="google recaptcha for woocommerce" width="980" height="3611" /></p>
<h4>Requirements</h4>
<p>Minimum PHP version: 5.6</p>

Google reCaptcha

<p>Protect your website from spam and bot attacks by adding reCaptcha to your WordPress & WooCommerce checkout, login, registration, reset password and other pages.</p>

Security vs Google reCaptcha