Yes, on WordPress's own registration form and on WooCommerce's My Account form, with Settings → Sign-ups → Screen new sign-ups for bots. It turns away a form that fills in a field only a machine can see, a form sent back in under three seconds or more than a day after it was drawn, and more than three new accounts from one address in an hour (you can choose 1 to 20). At checkout only the limit applies, so the field and the clock never stop a customer paying. The limit can: an order that would make one account too many from one address in the hour is refused, so a shop whose customers share a connection may want a higher number. There is no puzzle for your customers, and nothing is sent to another service.
It is on for a site that installs the plugin now. A site that already had the plugin is asked on the Dashboard, where people can sign up through a form it covers, because it can turn away a sign-up that is accepted today.
It does not cover a Multisite network's wp-signup.php page, or forms other plugins draw and handle themselves, such as WPForms, Gravity Forms or Ultimate Member. The turned-away sign-ups are listed under Who has tried → Sign-ups, with the reason for each.
Still stuck? Ask the developers who wrote it. We aim to reply within one business day.
Login Security
Stop the machines guessing at your passwords, and see exactly who has been trying.
From $19 a year · every feature · 30-day refund
