Title: VAPTCHA Human Verification Author: vaptchateam Published: August 26, 2026 Last modified: August 26, 2026 --- Search plugins ![](https://s.w.org/plugins/geopattern-icon/vaptcha-human-verification.svg) # VAPTCHA Human Verification By [vaptchateam](https://profiles.wordpress.org/vaptchateam/) [Download](https://downloads.wordpress.org/plugin/vaptcha-human-verification.1.0.3.zip) * [Details](https://wordpress.org/plugins/vaptcha-human-verification/#description) * [Reviews](https://wordpress.org/plugins/vaptcha-human-verification/#reviews) * [Installation](https://wordpress.org/plugins/vaptcha-human-verification/#installation) * [Development](https://wordpress.org/plugins/vaptcha-human-verification/#developers) [Support](https://wordpress.org/support/plugin/vaptcha-human-verification/) ## Description VAPTCHA Human Verification is a completely free WordPress human verification plugin. It helps protect standard WordPress forms from automated abuse while keeping the original page layout unchanged. The plugin protects: * WordPress login * User registration * Password reset * Comments Verification opens only when a visitor submits an enabled form. The plugin does not add a visible verification button or modify the native WordPress form styling. #### Free to use * The VAPTCHA Human Verification plugin is completely free to download and use. * The ready-to-use shared verification unit works immediately after activation at no additional cost. * No VAPTCHA account is required for the shared unit. * Site owners can optionally connect their own verification unit for independent statistics and management. #### Security by design The plugin follows WordPress security practices and is designed to keep verification credentials and form data protected: * VKEY is used only by server-side PHP and is never sent to the browser, HTML, JavaScript, REST responses, or browser developer tools. * Protected forms use WordPress nonces, input sanitization, and escaped output. * Missing, expired, invalid, or forged verification data is rejected. * Verification and network failures fail closed instead of accepting the protected action. * The plugin does not modify WordPress login or comment styles and does not add a public credit link. The plugin includes a ready-to-use shared verification unit, so protection works immediately after activation. For independent verification statistics and unit management, create a verification unit at https://www.vaptcha.com/ and enter its VID and VKEY on the settings page. ### External services This plugin connects to the VAPTCHA human verification service to protect the WordPress forms selected by the site administrator. * When a protected form is displayed, the browser loads the VAPTCHA SDK from `https:// c4.vaptcha.com/src/v4.js`. * When a visitor submits a protected form and verification starts, the SDK connects to VAPTCHA service endpoints to provide human verification. VAPTCHA processes the visitor’s IP address, browser and device signals (including the user agent), verification-session identifiers, verification results, and the interaction data produced within the verification interface, such as operation timing and trajectory characteristics. * The SDK may use cookies or browser local storage for limited verification-session or device-recognition identifiers. They are used only to help complete verification, reduce repeated verification, prevent abuse, and protect service security; they are not used for advertising or unrelated tracking. * Before WordPress accepts a protected action, the WordPress server sends the VID, VKEY, verification token, verification-session identifier, and visitor IP address to `https://v41.vaptcha.com/api/verify` for server-side verification. The plugin does not send WordPress usernames, passwords, comment text, or other form contents to VAPTCHA. The VAPTCHA service is provided by VAPTCHA: * [User Service Agreement](https://www.vaptcha.com/legal#terms) * [Privacy Statement](https://www.vaptcha.com/legal#privacy) By installing and activating the plugin, the site administrator enables this external service for the selected forms and is responsible for providing any notice required for the site’s visitors. ### Privacy Protected forms use the external VAPTCHA service. See the [VAPTCHA Privacy Statement](https://www.vaptcha.com/legal#privacy) for the information processed for verification, including the limited use of cookies and browser local storage. No VAPTCHA-powered public credit link is added by this plugin. Site administrators should disclose this processing in their own privacy notice where required. ## Installation 1. Upload the `vaptcha-human-verification` folder to `/wp-content/plugins/`, or install the ZIP from the WordPress Plugins screen. 2. Activate **VAPTCHA Human Verification**. 3. Open **Settings > VAPTCHA Human Verification**. 4. Keep the ready-to-use shared unit, or configure your own VID and VKEY. 5. Select the forms that should require verification and save. ## FAQ ### Is this plugin free? Yes. The plugin and the ready-to-use shared verification unit are completely free to use. No registration is required for the shared unit. An independent VAPTCHA unit is optional. ### Is registration required? No. The shared verification unit works immediately after activation. Creating an independent unit is recommended when you want separate verification statistics. ### Is VKEY exposed to browser developer tools? No. VKEY is used only by server-side PHP when WordPress calls the VAPTCHA verify endpoint. It is never included in HTML or JavaScript. ### Does the plugin change my theme or login page styles? No. The plugin adds hidden fields and a submit listener to standard WordPress hooks. Verification opens only after the visitor submits a protected form. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “VAPTCHA Human Verification” is open source software. The following people have contributed to this plugin. Contributors * [ vaptchateam ](https://profiles.wordpress.org/vaptchateam/) * [ vaptcha ](https://profiles.wordpress.org/vaptcha/) [Translate “VAPTCHA Human Verification” into your language.](https://translate.wordpress.org/projects/wp-plugins/vaptcha-human-verification) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/vaptcha-human-verification/), check out the [SVN repository](https://plugins.svn.wordpress.org/vaptcha-human-verification/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/vaptcha-human-verification/) by [RSS](https://plugins.trac.wordpress.org/log/vaptcha-human-verification/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.3 * Add detailed external-service, data-processing, and cookie disclosures with direct links to the VAPTCHA User Service Agreement and Privacy Statement. #### 1.0.2 * Show independent VID and VKEY fields only when the independent unit mode is selected. * Require both independent credentials before saving that mode. * Replace the standard settings notice with a compact fading success toast. #### 1.0.1 * Renamed the plugin and slug to version-neutral VAPTCHA Human Verification. #### 1.0.0 * Initial WordPress.org submission. * Submit-triggered protection for login, registration, password reset, and comments. * Ready-to-use shared verification unit and optional independent credentials. ## Meta * Version **1.0.3** * Last updated **2 days ago** * Active installations **Fewer than 10** * WordPress version ** 6.0 or higher ** * Tested up to **7.1** * PHP version ** 7.4 or higher ** * Tags * [captcha](https://wordpress.org/plugins/tags/captcha/)[comments](https://wordpress.org/plugins/tags/comments/) [login](https://wordpress.org/plugins/tags/login/)[security](https://wordpress.org/plugins/tags/security/) [spam](https://wordpress.org/plugins/tags/spam/) * [Advanced View](https://wordpress.org/plugins/vaptcha-human-verification/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/vaptcha-human-verification/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/vaptcha-human-verification/reviews/) ## Contributors * [ vaptchateam ](https://profiles.wordpress.org/vaptchateam/) * [ vaptcha ](https://profiles.wordpress.org/vaptcha/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/vaptcha-human-verification/)