Find your store

Add-on

Google reCAPTCHA

Adds a "I'm not a robot" challenge to the login and register forms to stop bots and credential-stuffing attempts. Configure your site and secret keys from a settings panel right on this Plugins screen — deactivate to remove the challenge immediately.

  • Version 1.0.18

Add-on

Buy and install it from Add-ons in your admin panel.

Buy now · ₹399.00 Choose a platform

Changelog

  1. Version 1.0.18 12 Nov 2026

    - A settings file left in the plugin's folder by an older version is read as plain data and never run as code. One that can't be read that way is not used: its contents are kept in a config-unreadable-….php copy that can't run, and the dashboard asks you to enter the settings again. On a site without the settings table, settings are saved in a form that is never run either.

  2. Version 1.0.17 8 Nov 2026

    - Visitor addresses in this add-on's limits and logs always come from the store's trusted-proxy setting (TRUSTED_PROXY_IPS): behind a listed proxy or CDN they are the visitor's own, never the proxy's; with none listed nothing changes.

  3. Version 1.0.16 29 Oct 2026

    - Amharic (አማርኛ) translation, machine-translated (review welcome).
    - Oromo (Afaan Oromoo) translation, machine-translated (review welcome).

  4. Version 1.0.15 26 Oct 2026

    - Adds Thai (ไทย). Machine-translated; review welcome.
    - Japanese translation.

  5. Version 1.0.14 25 Oct 2026

    - Adds Polish (pl) text. Machine-translated.

  6. Version 1.0.13 22 Oct 2026

    - A store previewed in another language shows the "Please confirm you're not a robot" message in that language, not the admin's own.

  7. Version 1.0.12 21 Oct 2026

    - Once your Site URL is confirmed, an answer solved on another website is refused even when the request claims to come from that website. A store served on other addresses can add them with the recaptcha_hostnames filter.
    - The settings won't save your secret key in the Site key box: that box is shown to every visitor, and a secret there stopped the box loading, so nobody could sign in.

  8. Version 1.0.11 19 Oct 2026

    - Sign-ins from the mobile app are left alone, as sign-ups from the app already were: the app has no reCAPTCHA box, so asking would refuse every app sign-in. The app keeps its own failed sign-in limits. A store that wants app sign-ins refused can return false from the recaptcha_exempt_app_login filter.