Codenitive CAPTCHA Security

Description

Codenitive CAPTCHA Security helps protect WordPress, WooCommerce and Contact Form 7 forms from spam, bots and automated abuse.

Choose a single CAPTCHA provider from the plugin settings:

• Google reCAPTCHA v2 Checkbox
• Google reCAPTCHA v3
• Cloudflare Turnstile
• Disabled

Protect forms including:

• WordPress Login
• WordPress Registration
• WordPress Lost Password
• WordPress Comments
• WooCommerce Login
• WooCommerce Registration
• WooCommerce Checkout
• WooCommerce Product Reviews
• Contact Form 7

Google reCAPTCHA v2 supports Light and Dark themes plus Normal and Compact sizes. Cloudflare Turnstile supports Managed, Non-Interactive and Invisible widget modes plus Auto, Light and Dark themes for visible widgets.

Features

• Google reCAPTCHA v2 Checkbox support
• Google reCAPTCHA v2 theme and size customization
• Google reCAPTCHA v3 score-based support
• Cloudflare Turnstile support
• Single CAPTCHA provider selection
• Option to completely disable CAPTCHA protection
• Cloudflare Turnstile theme customization
• Cloudflare Turnstile Managed, Non-Interactive and Invisible mode mapping
• Cloudflare Turnstile appearance customization
• Cloudflare Turnstile widget size customization
• WordPress Login, Registration, Lost Password and Comments protection
• WooCommerce Login, Registration, classic Checkout, Checkout Block and Product Reviews protection
• Contact Form 7 integration
• Hide CAPTCHA for logged-in users
• CAPTCHA verification logs
• Provider error reporting for failed verification attempts
• Helps prevent spam, bots and brute-force attacks
• Easy configuration through the WordPress admin settings panel
• Compatible with most themes and caching plugins

Usage

After activating the plugin:

1. Go to Settings → Codenitive CAPTCHA Security.
2. Select your preferred CAPTCHA provider.
3. Enter the Site Key and Secret Key for the selected provider.
4. Configure additional provider settings if required.
5. Open the Options tab and enable protection for the desired forms.
6. Save your settings.

To disable CAPTCHA protection completely, select Disabled as the CAPTCHA provider.

Google reCAPTCHA v2 Customization

When Google reCAPTCHA v2 is selected, the checkbox widget supports:

Theme

• Light (default)
• Dark

Size

• Normal (default)
• Compact

These options apply only to the visible reCAPTCHA v2 checkbox. reCAPTCHA v3 is score-based and has no checkbox theme or size setting.

Cloudflare Turnstile Customization

When Cloudflare Turnstile is selected as the CAPTCHA provider, the following widget customization options are available:

Widget Mode

• Managed (recommended)
• Non-Interactive
• Invisible

The widget mode is bound to the Turnstile Site Key in Cloudflare. Select the same mode in the plugin so it can apply compatible presentation settings. The plugin does not send an unsupported mode value to the browser API.

Theme

• Auto
• Light
• Dark

Appearance

• Always
• Execute
• Interaction-only

Size

• Normal
• Compact
• Flexible

Theme, appearance and size apply to Managed and Non-Interactive widgets. Invisible widgets have no visual footprint, so those display settings are omitted when Invisible mode is selected.

CAPTCHA Verification Logs

The plugin can record failed CAPTCHA verification attempts to help administrators troubleshoot CAPTCHA configuration and verification issues.

Verification logs may include information such as:

• CAPTCHA provider
• Protected form or integration
• Verification result
• Provider error codes
• Date and time of the failed verification

Logs are intended for troubleshooting and monitoring CAPTCHA verification failures.

Privacy

This plugin connects to external CAPTCHA services to help prevent spam and automated abuse.

Data is sent to the currently selected CAPTCHA provider when CAPTCHA protection is used on a protected form.

Supported external services:

• Google reCAPTCHA
• Cloudflare Turnstile

If CAPTCHA is disabled, the plugin does not load or perform CAPTCHA verification through these providers.

External Services Used

This plugin uses one of the following third-party services depending on the CAPTCHA provider selected by the site administrator.

Google reCAPTCHA v2

• Purpose: Helps prevent spam and automated abuse during protected form submissions.
• Data Sent: Browser and interaction information may be sent to Google as part of the CAPTCHA verification process.
• When Sent: When Google reCAPTCHA is selected and a visitor interacts with a protected form.
• Service Provider: Google LLC
• Terms of Service: https://policies.google.com/terms
• Privacy Policy: https://policies.google.com/privacy

Google reCAPTCHA v3

• Purpose: Provides score-based protection against spam and automated abuse without displaying a checkbox challenge.
• Data Sent: Browser, interaction and form-action information may be sent to Google as part of CAPTCHA scoring and verification.
• When Sent: When Google reCAPTCHA v3 is selected and a visitor submits a protected form.
• Service Provider: Google LLC
• Terms of Service: https://policies.google.com/terms
• Privacy Policy: https://policies.google.com/privacy

Cloudflare Turnstile

• Purpose: Helps prevent spam and automated abuse on protected forms.
• Data Sent: Browser, network and other information required by the Turnstile verification service may be sent to Cloudflare.
• When Sent: When Cloudflare Turnstile is selected and CAPTCHA protection is used on a protected form.
• Service Provider: Cloudflare, Inc.
• Terms of Service: https://www.cloudflare.com/website-terms/
• Privacy Policy: https://www.cloudflare.com/privacypolicy/

If Invisible Turnstile mode is used, review Cloudflare’s Turnstile Privacy Addendum and reference it in your site’s privacy policy as required by Cloudflare:
https://www.cloudflare.com/turnstile-privacy-policy/

Feedback

If you like this plugin, please leave us a 5-star review:
https://wordpress.org/support/plugin/codenitive-captcha/reviews/#new-post

Need help or have a feature request? Use the Support Forum:
https://wordpress.org/support/plugin/codenitive-captcha/