WordPress login and form security
Login Security Pro extends Login Security Captcha with tools for protecting common WordPress and WooCommerce forms. It supports Cloudflare Turnstile and Google reCAPTCHA versions 2 and 3, allowing site administrators to apply verification where it is most useful. The plugin is designed for a fast, lightweight setup with simple options and minimal footprint.
Use the Pro edition to add protection to the standard login, registration, and lost-password forms, as well as comment forms. WooCommerce sites can also secure login, registration, lost-password, and checkout forms. These controls help reduce comment spam and support protection against brute-force login activity.
Verification options
The plugin supports both CAPTCHA and CAPTCHA-free services through Cloudflare Turnstile and Google reCAPTCHA. Different verification services or versions can be used on different forms at the same time, giving you flexibility when configuring a site with several public-facing entry points.
- Cloudflare Turnstile support.
- Google reCAPTCHA v2 and v3 support.
- Separate protection for WordPress and WooCommerce forms.
- reCAPTCHA v3 score value configuration.
- Light or dark CAPTCHA themes where supported.
- Compact or normal Turnstile size options.
- Option to set the reCAPTCHA v3 position.
Login controls and activity checks
Login Security Pro adds controls focused on suspicious or repeated login activity. You can limit login attempts by IP address, check and monitor the last login, and review login history by username. A recent-login dashboard widget provides a convenient place to view current login activity from the WordPress administration area.
The Pro edition also includes redirect options after login or logout and role-based redirection. These tools can help organize the next destination for users with different roles while keeping authentication flows connected to the appropriate site areas.
Comments and error monitoring
Comment forms can be protected against spam, while error logs can be monitored to help review CAPTCHA-related problems. The plugin also provides an option to disable CAPTCHA on the comment form for logged-in users, which can be useful when authenticated visitors do not need the same validation step.
Setup workflow
Begin by choosing the form areas that require protection, then select Cloudflare Turnstile or Google reCAPTCHA and configure the available options for that service. For Turnstile, create a Cloudflare account, open the Turnstile dashboard, provide the domain, and obtain the site key and secret key. For Google reCAPTCHA, use the reCAPTCHA Admin Console, sign in, provide the website domain, and select the required version before creating the keys.
Installation
Install and activate Login Security Pro in WordPress, enter the required service keys, and configure the protection options for the selected forms. Review the CAPTCHA theme, size, position, score, redirects, and login controls before saving the settings. Test the protected forms and check the error logs during setup.
