Title: CaptchaLa Author: captchala Published: June 21, 2026 Last modified: June 21, 2026 --- Search plugins ![](https://ps.w.org/captchala/assets/banner-772x250.png?rev=3580608) ![](https://ps.w.org/captchala/assets/icon-256x256.png?rev=3580608) # CaptchaLa By [captchala](https://profiles.wordpress.org/captchala/) [Download](https://downloads.wordpress.org/plugin/captchala.1.0.0.zip) * [Details](https://wordpress.org/plugins/captchala/#description) * [Reviews](https://wordpress.org/plugins/captchala/#reviews) * [Installation](https://wordpress.org/plugins/captchala/#installation) * [Development](https://wordpress.org/plugins/captchala/#developers) [Support](https://wordpress.org/support/plugin/captchala/) ## Description **Homepage:** [https://captcha.la/](https://captcha.la/) · **Dashboard:** [https://dash.captcha.la/](https://dash.captcha.la/)·** Pricing:** [https://captcha.la/pricing](https://captcha.la/pricing) **CaptchaLa** is a privacy-first CAPTCHA and anti-spam service. This plugin is the official WordPress integration — it ships built-in protection for WordPress core forms, WooCommerce, and the most popular third-party form plugins, with one mandatory mode: server-issued tokens that can’t be replayed. #### Why CaptchaLa? * **Privacy-first.** No personal-data harvesting, no behavioural ad signals, no tracking. * **Stronger token contract.** Every page render issues a server-side `sct_` token bound to action + IP; the browser only ever ships back a single-use `pt_` token. Replays, action mismatches, and IP changes are rejected at the SDK boundary. * **Free tier** for small sites. Paid plans for high-volume traffic and the optional content-moderation add-on. * **No hand-coded image CAPTCHAs.** The challenge is solved entirely by the CaptchaLa service — this plugin is thin glue. * **Auto-detected form integrations.** Drop the plugin in and the settings page lights up with the form plugins it found on your site. #### Built-in protection points * WordPress core: login, registration, lost-password, comments * WooCommerce: classic + block checkout, pay-for-order, account creation, my-account login / register / lost-password * Third-party form plugins (auto-detected): Contact Form 7, WPForms, Gravity Forms, Forminator, Formidable Forms, Fluent Forms, Elementor Pro Forms, Divi Builder forms, BuddyPress, bbPress, Ultimate Member, MemberPress, Easy Digital Downloads, MailPoet More integrations land in v1.1. See [https://captcha.la/integrations/wordpress](https://captcha.la/integrations/wordpress) for the full target list. ## Installation 1. Upload the `captchala` directory to `/wp-content/plugins/`, or install via the WordPress plugin browser. 2. Activate the plugin. 3. Sign up at [https://dash.captcha.la/](https://dash.captcha.la/) and copy your ** App Key** and **App Secret**. 4. Open **Settings CaptchaLa**, paste the keys, click **Test connection**, and save. 5. Toggle the integrations you want protected. ## FAQ ### Is CaptchaLa free? A free tier covers small sites. High-volume traffic and content-moderation features require a paid plan — see [https://captcha.la/pricing](https://captcha.la/pricing). ### Do I need to install the SDK separately? No. The PHP SDK is bundled in the plugin’s `vendor/` directory by the build pipeline, so you don’t need Composer. ### Does it work with my form plugin? CaptchaLa ships first-class integrations for the 14 most-used form plugins on wordpress. org. See [https://captcha.la/integrations/wordpress](https://captcha.la/integrations/wordpress) for the full list and the v1.1 roadmap. ### Does it work with WooCommerce Block Checkout? Yes. The Checkout integration covers both the classic shortcode-based checkout and the new block-based checkout. ### Will it block logged-in admins? No. By default the plugin skips CAPTCHA for users with `manage_options` or `edit_others_posts`. The toggle is on the settings page. ### How does the server_token flow work? On every page render the plugin issues a one-shot `sct_` token from your CaptchaLa account, scoped to the action (login / register / checkout / …) and bound to the visitor’s IP. The browser SDK exchanges that token for a `pt_` token after the human challenge passes. The plugin validates the `pt_` token server-side on form submit. Replays, action-mismatches, and IP changes are all rejected. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “CaptchaLa” is open source software. The following people have contributed to this plugin. Contributors * [ captchala ](https://profiles.wordpress.org/captchala/) [Translate “CaptchaLa” into your language.](https://translate.wordpress.org/projects/wp-plugins/captchala) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/captchala/), check out the [SVN repository](https://plugins.svn.wordpress.org/captchala/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/captchala/) by [RSS](https://plugins.trac.wordpress.org/log/captchala/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.0 * Initial release. * WordPress core: login, register, lost-password, comment. * WooCommerce: checkout (classic + block), pay-for-order, account creation, login, register, lost-password. * Third-party: Contact Form 7, WPForms, Gravity Forms, Forminator, Formidable, Fluent Forms, Elementor Pro Forms, Divi, BuddyPress, bbPress, Ultimate Member, MemberPress, Easy Digital Downloads, MailPoet. ## Meta * Version **1.0.0** * Last updated **15 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.0 or higher ** * Tested up to **7.0** * PHP version ** 8.0 or higher ** * Tags * [anti-spam](https://wordpress.org/plugins/tags/anti-spam/)[bot protection](https://wordpress.org/plugins/tags/bot-protection/) [captcha](https://wordpress.org/plugins/tags/captcha/)[security](https://wordpress.org/plugins/tags/security/) [spam protection](https://wordpress.org/plugins/tags/spam-protection/) * [Advanced View](https://wordpress.org/plugins/captchala/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/captchala/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/captchala/reviews/) ## Contributors * [ captchala ](https://profiles.wordpress.org/captchala/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/captchala/)