Title: ThinkCaptcha – Captcha for Login, Register and WooCommerce
Author: ThinkPlugin
Published: <strong>September 20, 2025</strong>
Last modified: September 19, 2026

---

Search plugins

![](https://ps.w.org/thinkcaptcha/assets/banner-772x250.png?rev=3403384)

![](https://ps.w.org/thinkcaptcha/assets/icon-256x256.png?rev=3364986)

# ThinkCaptcha – Captcha for Login, Register and WooCommerce

 By [ThinkPlugin](https://profiles.wordpress.org/thinkplugin/)

[Download](https://downloads.wordpress.org/plugin/thinkcaptcha.1.1.9.zip)

 * [Details](https://srd.wordpress.org/plugins/thinkcaptcha/#description)
 * [Reviews](https://srd.wordpress.org/plugins/thinkcaptcha/#reviews)
 *  [Installation](https://srd.wordpress.org/plugins/thinkcaptcha/#installation)
 * [Development](https://srd.wordpress.org/plugins/thinkcaptcha/#developers)

 [Support](https://wordpress.org/support/plugin/thinkcaptcha/)

## Description

ThinkCaptcha adds a simple, effective captcha to the WordPress and WooCommerce forms
that get attacked the most, so you can stop spam registrations, brute-force login
attempts, and junk submissions.

It uses Google’s familiar “I’m not a robot” checkbox (reCAPTCHA v2) and turns it
on with a single toggle — no coding needed. The captcha only loads on the pages 
that actually use it, so it stays light on performance.

#### Free features

 * Captcha on the WordPress login form to slow down brute-force attacks.
 * Captcha on the WordPress registration and password-reset forms.
 * Captcha on the WooCommerce login, registration, and password-reset forms.
 * Loads asynchronously and only where it’s needed.

#### ThinkCaptcha Pro

Want to protect the rest of your site? [ThinkCaptcha Pro](https://thinkplugin.com/thinkcaptcha-pro/)
extends the same captcha to:

 * The WooCommerce checkout, to help prevent fraudulent and spam orders.
 * Contact Form 7 and WPForms submissions.
 * The default WordPress registration form.

### Third-Party Service Disclosure

This plugin connects to the Google reCAPTCHA service to tell humans and bots apart.

 * Service used: Google reCAPTCHA (provided by Google LLC).
 * What is sent: to verify a visitor is human, the service collects and sends device
   and application data, along with the visitor’s IP address, to Google.
 * When it is sent: whenever a protected form is displayed and submitted.
 * Policies: use of Google reCAPTCHA is subject to Google’s [Privacy Policy](https://policies.google.com/privacy)
   and [Terms of Service](https://policies.google.com/terms).

## Screenshots

[⌊The settings panel with the Pro upgrade section.⌉⌊The settings panel with the 
Pro upgrade section.⌉[

The settings panel with the Pro upgrade section.

[⌊The general settings for entering your Site and Secret keys.⌉⌊The general settings
for entering your Site and Secret keys.⌉[

The general settings for entering your Site and Secret keys.

[⌊The integrations section, with free features enabled and Pro features available
as an upgrade.⌉⌊The integrations section, with free features enabled and Pro features
available as an upgrade.⌉[

The integrations section, with free features enabled and Pro features available 
as an upgrade.

[⌊The captcha on the WordPress login form.⌉⌊The captcha on the WordPress login form
.⌉[

The captcha on the WordPress login form.

[⌊The captcha on a WooCommerce form.⌉⌊The captcha on a WooCommerce form.⌉[

The captcha on a WooCommerce form.

## Installation

 1. Upload the `thinkcaptcha` folder to the `/wp-content/plugins/` directory.
 2. Activate the plugin through the ‘Plugins’ menu in WordPress.
 3. Open the “ThinkCaptcha” menu in your WordPress admin dashboard.
 4. Get a Site Key and Secret Key for reCAPTCHA v2 (“I’m not a robot” checkbox) from
    the [Google reCAPTCHA admin console](https://www.google.com/recaptcha/admin/create).
 5. Paste your keys into the plugin’s settings page.
 6. Use the toggles to enable the captcha on the forms you want to protect.
 7. Save your changes — protection is now active.

## FAQ

### How do I add a captcha to the WordPress login form?

After adding your Google reCAPTCHA keys, open the ThinkCaptcha settings page and
enable “WordPress – Login Form”. The captcha is added to your login page automatically,
which helps protect against brute-force attacks.

### Can I add a captcha to my WooCommerce forms?

Yes. You can enable the captcha on the WooCommerce login, registration, and password-
reset forms from the settings panel. The WooCommerce checkout is available in the
Pro version.

### Does the plugin support Contact Form 7 or WPForms?

Contact Form 7 and WPForms are supported in the Pro version.

### What is the difference between a captcha and reCAPTCHA?

“Captcha” is the general term for a test that tells humans and bots apart. reCAPTCHA
is Google’s version of it, which uses risk analysis for a smoother experience. ThinkCaptcha
uses reCAPTCHA v2.

### Does the plugin slow down my site?

No. The script loads asynchronously and only on pages where the captcha is active,
so it does not block your pages from loading.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“ThinkCaptcha – Captcha for Login, Register and WooCommerce” is open source software.
The following people have contributed to this plugin.

Contributors

 *   [ ThinkPlugin ](https://profiles.wordpress.org/thinkplugin/)

[Translate “ThinkCaptcha – Captcha for Login, Register and WooCommerce” into your language.](https://translate.wordpress.org/projects/wp-plugins/thinkcaptcha)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/thinkcaptcha/), check
out the [SVN repository](https://plugins.svn.wordpress.org/thinkcaptcha/), or subscribe
to the [development log](https://plugins.trac.wordpress.org/log/thinkcaptcha/) by
[RSS](https://plugins.trac.wordpress.org/log/thinkcaptcha/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.1.9

 * FIX: The WooCommerce login captcha now blocks login on failed verification (moved
   to the woocommerce_process_login_errors filter).
 * FIX: Removed an unreliable page check during wp_loaded that could stop WooCommerce
   login verification from running.
 * FIX: The captcha script now loads with proper async/defer attributes via the 
   script_loader_tag filter.
 * TWEAK: Rewrote the readme and plugin title for clarity and to follow WordPress.
   org guidelines (removed keyword stuffing).
 * TWEAK: Updated tested-up-to values (WordPress 7.1, WooCommerce 11.0).
 * TWEAK: Removed a leftover Poppins font reference from the admin styles.

#### 1.1.6

 * TWEAK: Tested up to WordPress 6.9.

#### 1.1.5

 * FIX: Resolved a short-description length warning in readme.txt.
 * FIX: Resolved a “Tested up to” tag validation error.
 * FIX: Resolved a translation-loading notice by optimizing text domain calls.
 * FIX: Added missing translator comments for better I18n compliance.
 * TWEAK: Removed the Google Fonts dependency for better GDPR compliance; switched
   to native WordPress admin fonts.
 * TWEAK: Improved IP detection for sites behind Cloudflare or a proxy.

#### 1.1.2

 * FIX: Switched to wp_enqueue_script for loading external JavaScript.
 * FIX: Added nonce checks to all form submissions (CSRF protection).
 * FIX: Added sanitization and unslashing for all $_POST and $_SERVER inputs.
 * FIX: Added versioning to enqueued scripts and styles.
 * FIX: Added isset checks for $_SERVER variables to prevent notices.

#### 1.1.1

 * FIX: Bundled the Font Awesome library locally to remove external dependencies.

#### 1.1.0

 * Initial public release.

## Meta

 *  Version **1.1.9**
 *  Last updated **3 days ago**
 *  Active installations **40+**
 *  WordPress version ** 5.5 or higher **
 *  Tested up to **7.1.1**
 *  Language
 * [English (US)](https://wordpress.org/plugins/thinkcaptcha/)
 * Tags
 * [captcha](https://srd.wordpress.org/plugins/tags/captcha/)[login](https://srd.wordpress.org/plugins/tags/login/)
   [recaptcha](https://srd.wordpress.org/plugins/tags/recaptcha/)[spam](https://srd.wordpress.org/plugins/tags/spam/)
   [woocommerce](https://srd.wordpress.org/plugins/tags/woocommerce/)
 *  [Advanced View](https://srd.wordpress.org/plugins/thinkcaptcha/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/thinkcaptcha/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/thinkcaptcha/reviews/)

## Contributors

 *   [ ThinkPlugin ](https://profiles.wordpress.org/thinkplugin/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/thinkcaptcha/)