WordPressSpamOff - Google reCAPTCHA
Spam and bot protection for WooCommerce and WordPress forms
Google reCAPTCHA v2 and v3 for checkout, login, registration and comments, free on WordPress.org. SpamOff Pro adds Turnstile, hCaptcha, behavioural checks and analytics.
What SpamOff - Google reCAPTCHA does
reCAPTCHA v2 and v3
Invisible score-based protection, or the visible checkbox.
Every key form
Checkout, guest checkout, login, registration, lost password and comments.
Classic and block checkout
Both checkouts protected, with HPOS compatibility.
Four providers (Pro)
reCAPTCHA v2 and v3, Cloudflare Turnstile and hCaptcha, with hybrid challenge mode.
Behavioural protection (Pro)
Honeypot, minimum form time and mouse-movement detection, with smart IP blocking.
Analytics and alerts (Pro)
Submissions, blocks and trends by day, provider and form, with email alerts.
SpamOff stops spam, fake registrations, brute-force logins, fake orders, comment spam and automated bots on WooCommerce and WordPress, and takes a few minutes to set up. It protects both the classic checkout and the block checkout, and works with WooCommerce’s high-performance order storage.
SpamOff Basic
Free on WordPress.org, where it has 10+ active installs. Choose Google reCAPTCHA v3 for invisible, score-based protection, or v2 for the familiar “I’m not a robot” checkbox, and turn it on form by form: checkout, guest checkout, login, registration and lost password in WooCommerce, and login, registration, lost password and comments in WordPress. A shortcode adds it to any other form.
SpamOff Pro
For stores that need more than reCAPTCHA. Choose between Google reCAPTCHA v2 and v3, Cloudflare Turnstile and hCaptcha, and switch without re-entering keys. Behavioural signals run alongside the captcha: a hidden honeypot field, a minimum time to fill a form, and mouse-movement detection can flag a bot even when the captcha passes. Hybrid challenge mode starts invisible and only shows a visible challenge when a score is borderline.
Per-form thresholds, automatic IP blocking and whitelists keep the rules tight where it matters, and an analytics dashboard shows submissions, blocks and the block rate across every form and provider, with email alerts for blocked attempts.
Choose your plan
SpamOff Basic
Free
- Google reCAPTCHA v2 and v3
- WooCommerce and WordPress forms
- Classic and block checkout
SpamOff Pro
Contact us
- reCAPTCHA, Turnstile and hCaptcha
- Hybrid challenge mode
- Behavioural protection and smart blocking
- Analytics dashboard and email alerts
Frequently asked questions
Does SpamOff support both reCAPTCHA v2 and v3?
Yes. Choose v2 (checkbox) or v3 (invisible, score-based) and switch between them at any time in the settings.
Does it support the WooCommerce block checkout?
Yes. A v3 token is added to the block checkout’s request and verified on the server before the order is created.
Can it protect forms that are not WooCommerce?
Yes. It protects WordPress login, registration, lost password and comments, and the shortcode adds it to any other form.
Why are real customers failing on v3?
The minimum score may be too strict. Lower it in the settings (try 0.3); new sites tend to score lower until they build up traffic.
What does SpamOff Pro add?
Cloudflare Turnstile and hCaptcha alongside reCAPTCHA, hybrid challenge mode, behavioural checks, per-form thresholds with automatic IP blocking, and an analytics dashboard with email alerts.
Which captcha provider should I pick in SpamOff Pro?
For most stores, reCAPTCHA v3: invisible and score-based. To avoid Google entirely, Cloudflare Turnstile is the best alternative.
Get more from SpamOff - Google reCAPTCHA
Questions about SpamOff - Google reCAPTCHA?
Talk to the developers who built it. We reply within 24 business hours.