Hi,
Thanks for reaching out, and you’re not doing anything wrong. That message means Google reCAPTCHA is enabled in Clean Login’s settings, so the plugin expects a reCAPTCHA answer with every login. The box isn’t showing up on your login page, though, so nothing gets sent and every login is rejected.
To log in right now: go to Settings → Clean Login and untick “Enable Google reCaptcha?”. If you can’t reach wp-admin, log in through the standard /wp-login.php page first, which Clean Login doesn’t affect.
To find the cause: we’ve just released version 1.20, which adds a “Google reCAPTCHA diagnostics” section at the bottom of Settings → Clean Login. Please update the plugin, turn reCAPTCHA back on and check that section:
- Automatic checks: anything marked in red or orange tells you what’s wrong. For example, it shows whether your theme has an old copy of the login form without the reCAPTCHA box, or whether you’re running a cache/optimisation or cookie consent plugin that may be blocking Google’s script.
- Test the keys with Google: tick the box shown there and click the verify button. This confirms whether your Site Key and Secret Key work. Note that Clean Login needs a reCAPTCHA v2 “I’m not a robot” checkbox key; v3 and Invisible keys won’t show a box.
- Failed validations log: click “Enable logging”, try to log in again from your login page (ideally in a private window), then come back. The log will show exactly why the login was rejected.
If the log says no reCAPTCHA answer was received, the box isn’t loading on the front end. That’s usually a cache plugin delaying JavaScript (exclude recaptcha/api.js from the delay/defer/combine options and purge the cache) or a cookie banner blocking Google until consent.
If you’re still stuck, send us a screenshot of that diagnostics section and we’ll tell you exactly what to change.
Best regards,
Javier
