<h2>Security for WooCommerce:</h2>
<p>Fraudsters often use VPNs and proxies to hide their identities, putting eCommerce businesses at risk. <strong data-start="102" data-end="130">Security for WooCommerce</strong> helps you detect and block high-risk transactions by identifying masked locations and restricting purchases from countries you don’t sell to. While it strengthens your store’s security, it does not protect against velocity attacks. For advanced fraud prevention, check out <a href="//woocommerce.com/products/woocommerce-anti-fraud/" rel="noopener" data-start="404" data-end="431"> Anti-Fraud for Woocommerce</a>.</p>
<h2><strong>Key Features</strong></h2>
<div class="two-columns">
<p></p>
<div class="twocol-one">
<h3><strong>Restrict Sales to a Single Country</strong></h3>
<p>If your business operates domestically, you can limit sales to a single country to focus on your target market and block unwanted traffic from other regions.</p>
<p><img class="alignnone wp-image-18734004756467" src="https://woocommerce.com/wp-content/uploads/2022/11/AllowOnlyTrafficFromCountry.webp?w=896" alt="Allow Only Traffic From one Country" width="693" height="390" /></p>
</div>
<div class="twocol-one">
<h3><strong>Manually Allow or Block Individual IP Addresses</strong></h3>
<p>With<strong> Security for WooCommerce,</strong> you can manually manage IP access by blocking suspicious users or allowing trusted ones. Add problematic IPs to the Blacklist to prevent fraud, or Whitelist trusted users like admins or virtual assistants for seamless access. This ensures secure, controlled access while protecting your store.<img class="alignnone wp-image-18734004756439" src="https://woocommerce.com/wp-content/uploads/2022/11/RandomIps.webp?w=896" alt="restrict access to cart at checkout" width="693" height="390" /><br />
<strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Restrict Access to Cart and Checkout</strong></p>
<p>Enhances security by allowing you to restrict access to the cart and checkout pages based on a visitor’s country.</p>
<p><img class="alignnone wp-image-18734004756362" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictAccess.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Restrict Access at the Product Level</strong></h3>
<p>Strengthens security by allowing you to restrict access to a product based on a visitor’s country.</p>
<p><img class="alignnone wp-image-18734004756380" src="https://woocommerce.com/wp-content/uploads/2022/11/AccessAtProductLevel.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Category-Based Product Restrictions</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Allows precise control over product visibility by region. The </span><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Category<br />
Restrictions On/Off </strong><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">setting enables or disables category-based blocking, while </span><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Block Products by Category </strong><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">lets you restrict specific WooCommerce product categories for visitors from blocked countries, ensuring compliance and a tailored shopping experience.</span></p>
<p><img class="alignnone wp-image-18734004756400" src="https://woocommerce.com/wp-content/uploads/2022/11/CategoryOnOff.webp?w=896" alt="" width="693" height="390" /></p>
<h3><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">For Publicly Accessible Download Product Links</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Secure your downloadable products with IP-based access control. Choose <strong>Whitelist Mode</strong> to block specific IPs or <strong>Blacklist Mode</strong> to allow only approved IPs. Custom error messages ensure unauthorized downloads are prevented, providing extra protection and control for your WooCommerce store.</span></p>
<p><img class="alignnone wp-image-18734004756395" src="https://woocommerce.com/wp-content/uploads/2022/11/PublicAccessibleDownloadlinks.webp?w=896" alt="whitelisting and blacklisting toggles" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Block Visitors Access between Timeframe</strong></p>
</div>
</div>
</div>
</div>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Enables you to restrict order placement to specific timeframes, ideal for stores serving a particular country or region and aiming to prevent orders from unintended time zones or areas.</span></p>
<p><img class="alignnone wp-image-18734004756413" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictTimeFrame.webp?w=896" alt="block visitors access between timeframe toggle and time range" width="693" height="390" /></p>
<h3><strong style="font-family: var(--wccom-font-family-header);font-size: var(--wp--preset--font-size--paragraph-medium,18px);letter-spacing: -0.02em">Enhanced Site Protection</strong></h3>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em;font-size: 16px">The comprehensive WooCommerce Security plugin includes features to enhance site protection. It can hide the WordPress version number to prevent attackers from identifying version-specific vulnerabilities. Two-Factor Authentication (2FA) adds an extra layer of security by requiring a second verification step. Additionally, a passcode protection feature allows restricted access using a configured username and password. All features are disabled by default.</span></p>
</div>
<div class="twocol-one">
<div class="flex max-w-full flex-col flex-grow">
<p><img class="alignnone wp-image-18734004756423" src="https://woocommerce.com/wp-content/uploads/2022/11/EnhancedSiteProteciton.webp?w=896" alt="enhanced site protection toggles" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Scan Malware Manually</strong></p>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Enables on-demand malware scans for your WordPress site, detecting security threats, suspicious code, and compromised files. Users can initiate a detailed scan with one click, receiving results that include the last scan date, infected files with suspected line numbers, and total threats found. The scanner checks PHP files, detects malicious patterns, and compares files against malware signatures, with results stored in the WordPress database and displayed in a table.</span></p>
</div>
</div>
</div>
</div>
<p><img class="alignnone wp-image-18734004756432" src="https://woocommerce.com/wp-content/uploads/2022/11/ScanMalware.webp?w=896" alt="scan malware manually button" width="693" height="390" /></p>
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="ae4271fb-4acd-4aa0-bca9-25faed52bb26" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light"><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Directory and File Protection Settings</strong></div>
<div>These features help keep your site’s folders and files private and secure.<strong> Directory Listing Protection</strong> blocks people from browsing your folders, while <strong>File Indexing Protection</strong> prevents search engines from displaying sensitive files. Together, they keep your file structure hidden and your content safe. Both are off by default but can be easily turned on for extra security.</div>
<div><img class="alignnone wp-image-18734004756429" src="https://woocommerce.com/wp-content/uploads/2022/11/PreventDirectory.webp?w=896" alt="Prevent direct access directory on/off toggle" width="693" height="390" /></div>
</div>
</div>
</div>
<div class="group/conversation-turn relative flex w-full min-w-0 flex-col agent-turn">
<div class="flex-col gap-1 md:gap-3">
<div class="flex max-w-full flex-col flex-grow">
<div class="min-h-8 text-message flex w-full flex-col items-end gap-2 whitespace-normal break-words text-start [.text-message+&]:mt-5" dir="auto" data-message-author-role="assistant" data-message-id="7ba194b5-e21f-46a2-9ae8-e3f0af69f4c8" data-message-model-slug="gpt-4o">
<div class="flex w-full flex-col gap-1 empty:hidden first:pt-[3px]">
<div class="markdown prose w-full break-words dark:prose-invert light">
<p>The comprehensive <strong>Security for WooCommerce</strong> plugin ensures your website remains discoverable by allowing trusted search engine bots to index your site, even if they originate from blocked countries. You’ll receive <strong>email alerts</strong> whenever a blocked visitor attempts to log in via WP-Admin. Designed to help WooCommerce businesses block unwanted traffic, this plugin allows you to focus on serving genuine customers.</p>
<p><strong style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);font-size: 16px;letter-spacing: -0.011em">Block Visitors Access between Timeframe</strong></p>
<p><span style="color: var(--wp--preset--color--woo-text-gray,#101517);font-family: var(--wccom-font-family-default);letter-spacing: -0.011em">Empowers you to restrict order placement to specific timeframes, ideal for stores serving a particular country or region and aiming to prevent orders from unintended time zones or areas.</span></p>
<p><img class="alignnone wp-image-18734004756413" src="https://woocommerce.com/wp-content/uploads/2022/11/RestrictTimeFrame.webp?w=896" alt="Block visitors access between timeframe toggle" width="693" height="390" /></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div class="twocol-one last"></div>
</div>

Security

<h3>Stop Location Spoofing & Block VPN/Proxy Fraudsters</h3>

<h2><b>Protect your Website with Google reCAPTCHA</b></h2>
<p><span style="font-weight: 400">Stop spam, fake registrations, and bot-driven attacks before they reach your website. With our WooCommerce reCAPTCHA plugin, you can easily add Google reCAPTCHA to key areas of your store, including login, registration, password reset, checkout, and comments. You also have the flexibility to place reCAPTCHA anywhere on your site using a simple shortcode.</span></p>
<p><span style="font-weight: 400">The plugin supports both Google reCAPTCHA v2 and v3 (Invisible), giving you full control over how you want to protect your site. With Invisible reCAPTCHA v3, the challenge only appears when activity seems suspicious, keeping your genuine customers free from interruptions while blocking malicious traffic.</span></p>
<p><span style="font-weight: 400">In a time when spam and hacking attempts are on the rise, this plugin adds a strong layer of protection. It prevents bots from fake logins, fraudulent checkouts, card testing, password resets, and comment spam, helping you secure your revenue and maintain customer trust.</span></p>
<h3><b>Features of the WooCommerce reCAPTCHA Plugin</b></h3>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Supports Google reCAPTCHA v2 (visible) and v3 (invisible)</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Exclude specific countries, IP addresses, and user roles</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Enable reCAPTCHA on WordPress pages: </span>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Login Page</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Registration Page</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Lost Password Page</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Comments Section</span></li>
</ul>
</li>
<li style="font-weight: 400"><span style="font-weight: 400">Enable reCAPTCHA on WooCommerce pages </span>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Login Page</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Registration Page</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Lost Password Page</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Checkout (Guest and Logged-In checkout pages)</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Pay for Order Page</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Product Reviews</span></li>
</ul>
</li>
<li style="font-weight: 400"><span style="font-weight: 400">Customize per page: Field Title, Theme (Light/Dark), Size (Normal/Compact)</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Add reCAPTCHA anywhere using shortcode</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Configure WordPress and WooCommerce pages separately</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Provides seamless protection without disrupting genuine users</span></li>
</ul>
<h3><b>Supports Google reCAPTCHA V2 and V3</b></h3>
<h4><span style="font-weight: 400">With Google reCAPTCHA for WooCommerce, you can secure your store using both V2 and V3 protection. The V2 reCAPTCHA displays a visible challenge for all users, while the V3 version runs invisibly in the background and only appears when suspicious activity is detected, ensuring genuine customers enjoy a smooth shopping experience.<br />
<strong>V2 Google reCaptcha Example:</strong></span></h4>
<p><img class="aligncenter wp-image-18734005635195 size-full" src="https://woocommerce.com/wp-content/uploads/2025/08/Screenshot-from-2025-08-18-12-03-39.png" alt="" width="1134" height="545" /></p>
<h4><span style="font-weight: 400"><strong>V3 Google reCaptcha Example:</strong></span></h4>
<p><img class="aligncenter wp-image-18734005635213 size-full" src="https://woocommerce.com/wp-content/uploads/2025/08/Screenshot-from-2025-08-18-12-08-57.png" alt="" width="1317" height="457" /></p>
<h3><b>Add reCAPTCHA to WordPress Pages</b></h3>
<p><span style="font-weight: 400">Enable reCAPTCHA on key WordPress pages, including login, registration, lost password, and comment forms. Customize the display options to match your site’s needs and safeguard against spam, bots, and fake signups.</span></p>
<p><img class="aligncenter wp-image-18734005635250 size-full" src="https://woocommerce.com/wp-content/uploads/2025/08/image_d94600.png" alt="" width="1636" height="855" /></p>
<h3><b>Enable reCAPTCHA on WooCommerce Pages</b></h3>
<p><span style="font-weight: 400">Protect essential WooCommerce pages such as login, registration, lost password, guest checkout, logged-in checkout, pay for order, and product reviews. Each page can be customized separately, ensuring strong security without disrupting the customer experience.</span></p>
<p><img class="aligncenter wp-image-18734005635253 size-full" src="https://woocommerce.com/wp-content/uploads/2025/08/image-1.png" alt="" width="1705" height="973" /></p>
<h3><b>Customize reCAPTCHA for WordPress and WooCommerce Pages</b></h3>
<p><span style="font-weight: 400">Gain full control over how and where reCAPTCHA appears on your website. Adjust settings for each page individually, including:</span></p>
<ul>
<li style="font-weight: 400"><span style="font-weight: 400">Enable or disable reCAPTCHA</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Set a custom field title</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Choose between light and dark themes</span></li>
<li style="font-weight: 400"><span style="font-weight: 400">Select size: normal or compact</span></li>
</ul>
<p><img class="aligncenter wp-image-18734005635255 size-full" src="https://woocommerce.com/wp-content/uploads/2025/08/image-2.png" alt="" width="1675" height="393" /></p>
<h3><b>Add reCAPTCHA Using Shortcode</b></h3>
<p><span style="font-weight: 400">Secure any form page on your website by placing the shortcode [fme_recaptcha]. This gives you the flexibility to add Google reCAPTCHA beyond default WordPress and WooCommerce pages, ensuring site-wide protection wherever it’s needed.</span></p>
<p><img class="aligncenter wp-image-18734005635256 size-full" src="https://woocommerce.com/wp-content/uploads/2025/08/image-3.png" alt="" width="765" height="444" /></p>

Google reCaptcha Integration

<p>Secure your website against spam and bot attacks by integrating reCAPTCHA into your WordPress and WooCommerce checkout, login, registration, and other key pages.</p>

Security vs Google reCaptcha Integration