They are not exclusive, and a CAPTCHA solves a different problem. A CAPTCHA makes each attempt cost the attacker something; a lockout makes the attempts stop entirely after five. The one thing a CAPTCHA cannot do is tell you what has been happening, which is half of what this plugin is for.
This plugin does not include one, deliberately — every CAPTCHA worth having is somebody else's service, loaded on your sign-in page, watching your visitors.
Still stuck? Ask the developers who wrote it. We aim to reply within one business day.
