Description
R2K Security Captcha is a comprehensive security plugin designed to safeguard your WordPress site’s critical entry points. By leveraging advanced captcha technology, it effectively blocks bots and malicious traffic without compromising user experience.
Key features include:
* Dual-Service Support: Seamlessly integrate with either Google reCAPTCHA Enterprise or Cloudflare Turnstile.
* Smart Protection: Use reCAPTCHA Enterprise’s score-based system to dynamically assess risk and block suspicious activity.
* User-Friendly Turnstile: Implement a non-intrusive, privacy-first security solution with Cloudflare Turnstile.
* Advanced Form Protection: Secure your login, registration, and lost password forms.
* IP Whitelisting: Easily add trusted IP addresses to a whitelist to bypass captcha checks for specific users or locations.
* Error Notifications: Receive email notifications if your captcha keys fail, ensuring you are always aware of your site’s security status.
This plugin provides a robust and secure layer of defense, making your website a safer place for real users while frustrating spammers and bots.
Screenshots
reCAPTCHA Enterprise Settings: A view of the settings for Google’s reCAPTCHA Enterprise, including fields for Project ID, Site Key, and sensitivity. 
Turnstile Settings: A view of the settings for Cloudflare’s Turnstile, showing fields for the Site Key and Secret Key. 
WordPress Login: A view of WordPress after activate recaptcha.
Installation
- Upload the
r2k-captchafolder to the/wp-content/plugins/directory. - Activate the plugin through the ‘Plugins’ menu in WordPress.
- Go to
Tools > R2K Security Captchain your WordPress admin dashboard. - Select your preferred captcha service (reCAPTCHA Enterprise or Turnstile).
- Enter your Site Key, Secret Key, and Project ID (for reCAPTCHA Enterprise) or Secret Key (for Turnstile).
- Save your changes, and the plugin will begin protecting your site.
FAQ
-
How do I choose between Google reCAPTCHA Enterprise and Cloudflare Turnstile?
-
Google reCAPTCHA Enterprise offers a sophisticated risk-scoring system that can be tuned for high accuracy. Cloudflare Turnstile provides a completely non-interactive, privacy-focused solution that requires zero user input for most visitors. The choice depends on your specific security and user experience priorities.
-
Can I use this plugin to secure contact forms?
-
This version is specifically designed to protect core WordPress forms: login, registration, and lost password. Future updates may include support for other form types.
-
What is the “IP Whitelist”?
-
The IP Whitelist allows you to add specific IP addresses that will be exempt from captcha verification. This is useful for administrators or a group of known, trusted users.
-
What happens if there is a problem with my keys?
-
The plugin will send a notification email to the address you configured in the settings, alerting you to the issue. It also displays an admin notice on the dashboard to help you quickly resolve any security problems.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“R2K Security Captcha (for reCAPTCHA Enterprise & Cloudflare Turnstile)” is open source software. The following people have contributed to this plugin.
Contributors
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.3
- Missing scripts on login in case of Subfolder wordpress
1.0.2
- Fix Javascript error
1.0.1
- Update Screenshots
1.0
- Initial release.
- Support for Google reCAPTCHA Enterprise and Cloudflare Turnstile.
- Protection for login, registration, and lost password forms.
- IP whitelisting and email notifications.