Title: SpamOff – Spam & Bot Protection Author: Pluginos Published: July 10, 2026 Last modified: July 10, 2026 --- Search plugins ![](https://ps.w.org/spamoff-bot-protection/assets/banner-772x250.png?rev=3604658) ![](https://ps.w.org/spamoff-bot-protection/assets/icon-256x256.png?rev=3604658) # SpamOff – Spam & Bot Protection By [Pluginos](https://profiles.wordpress.org/pluginos/) [Download](https://downloads.wordpress.org/plugin/spamoff-bot-protection.1.0.0.zip) * [Details](https://wordpress.org/plugins/spamoff-bot-protection/#description) * [Reviews](https://wordpress.org/plugins/spamoff-bot-protection/#reviews) * [Installation](https://wordpress.org/plugins/spamoff-bot-protection/#installation) * [Development](https://wordpress.org/plugins/spamoff-bot-protection/#developers) [Support](https://wordpress.org/support/plugin/spamoff-bot-protection/) ## Description SpamOff protects your WooCommerce store and WordPress site from bots, fake registrations, and spam by adding Google reCAPTCHA to the forms you choose. Features: * reCAPTCHA v3 (invisible, score-based) and v2 (checkbox) support * WooCommerce Classic Checkout protection * WooCommerce Block Checkout protection (Store API, v3 only) with token auto-refresh so slow customers aren’t rejected for expired tokens * Customer Login, Registration, Lost Password * WordPress comments * Per-form on/off toggles * Customizable failure message and v2 widget theme/size * `[spamoff_bot_protection]` shortcode for manual placement * WooCommerce HPOS (Custom Order Tables) compatible ## Screenshots [⌊General Settings — reCAPTCHA type, Site Key, Secret Key, minimum score.⌉⌊General Settings — reCAPTCHA type, Site Key, Secret Key, minimum score.⌉[ General Settings — reCAPTCHA type, Site Key, Secret Key, minimum score. [⌊Advanced Settings — per-form protection toggles.⌉⌊Advanced Settings — per-form protection toggles.⌉[ Advanced Settings — per-form protection toggles. [⌊Customization — v2 widget theme/size and failure message.⌉⌊Customization — v2 widget theme/size and failure message.⌉[ Customization — v2 widget theme/size and failure message. [⌊v2 checkbox on the WooCommerce checkout page.⌉⌊v2 checkbox on the WooCommerce checkout page.⌉[ v2 checkbox on the WooCommerce checkout page. [[ [[ [[ ## Installation 1. Upload the plugin folder to `wp-content/plugins/` or install via the Plugins screen. 2. Activate the plugin. 3. Get a Site Key and Secret Key from https://www.google.com/recaptcha/admin 4. Go to **WooCommerce Settings SpamOff**. 5. On the **General Settings** tab, paste your Site Key and Secret Key, choose v2 or v3, and (for v3) set a minimum score. 6. On the **Advanced Settings** tab, check the forms you want to protect. ## FAQ ### Does this work with the WooCommerce Block Checkout? Yes. The Block Checkout uses the Store API, and SpamOff injects a v3 token into the checkout request’s extension data, then verifies it server-side before the order is built. The token refreshes automatically every 80 seconds (and immediately when the customer returns to the tab) so it never goes stale during a long checkout. Block Checkout always uses v3 — even if v2 is selected in the settings, v2 only applies to Classic Checkout and other forms. ### Does this work with WooCommerce HPOS (Custom Order Tables)? Yes. The plugin declares compatibility on `before_woocommerce_init`. ### How do I add the captcha to a form that isn’t in the built-in list? Use the `[spamoff_bot_protection]` shortcode inside the form. You can pass an `action` attribute to label the reCAPTCHA action: `[spamoff_bot_protection action="my_form"]`. ### Why is verification failing for legitimate users on v3? The minimum score may be too strict. Lower **Minimum Score** in General Settings( try 0.3) and test again. Google adjusts scores based on reputation, so brand-new sites tend to score lower until they accumulate traffic. ### Why doesn’t the v2 checkbox show up on the checkout page? Make sure the Site Key in your settings is a v2 key (not a v3 key — they are not interchangeable in Google’s admin console), the **Checkout Page** form is enabled in Advanced Settings, and that you are using the Classic Checkout (the Block Checkout does not support v2). ### Does the plugin send any data to third parties? This plugin relies on Google reCAPTCHA, a third-party service, to function. By using this plugin you agree to Google’s terms and acknowledge their privacy policy: * Terms of Service: https://policies.google.com/terms * Privacy Policy: https://policies.google.com/privacy What is loaded and when: * On every frontend page where the plugin is active and a Site Key is configured, the plugin enqueues Google’s reCAPTCHA JavaScript from `https://www.google.com/ recaptcha/api.js`. Loading this script allows Google to set cookies and collect information about the visitor as described in Google’s privacy policy. This page- wide load is a requirement of how reCAPTCHA v3 generates score-based tokens. * When a visitor submits one of the protected forms (or, for the Block Checkout, when the v3 token is generated), the plugin sends the reCAPTCHA token and the visitor’s IP address to Google’s `siteverify` endpoint (`https://www.google.com/ recaptcha/api/siteverify`) for validation. No other third-party calls are made by the plugin. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “SpamOff – Spam & Bot Protection” is open source software. The following people have contributed to this plugin. Contributors * [ Pluginos ](https://profiles.wordpress.org/pluginos/) [Translate “SpamOff – Spam & Bot Protection” into your language.](https://translate.wordpress.org/projects/wp-plugins/spamoff-bot-protection) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/spamoff-bot-protection/), check out the [SVN repository](https://plugins.svn.wordpress.org/spamoff-bot-protection/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/spamoff-bot-protection/) by [RSS](https://plugins.trac.wordpress.org/log/spamoff-bot-protection/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.0 * Initial release. ## Meta * Version **1.0.0** * Last updated **3 days ago** * Active installations **Fewer than 10** * WordPress version ** 5.8 or higher ** * Tested up to **7.0.1** * PHP version ** 7.4 or higher ** * Tags * [bot](https://wordpress.org/plugins/tags/bot/)[recaptcha](https://wordpress.org/plugins/tags/recaptcha/) [security](https://wordpress.org/plugins/tags/security/)[spam](https://wordpress.org/plugins/tags/spam/) [woocommerce](https://wordpress.org/plugins/tags/woocommerce/) * [Advanced View](https://wordpress.org/plugins/spamoff-bot-protection/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/spamoff-bot-protection/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/spamoff-bot-protection/reviews/) ## Contributors * [ Pluginos ](https://profiles.wordpress.org/pluginos/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/spamoff-bot-protection/)