WordPress reCAPTCHA.
Checks for the forms bots target.
Add WordPress reCAPTCHA and protect supported WooCommerce forms with Google v2 or v3 in Free. Pro adds Cloudflare Turnstile, hCaptcha, opt-in analytics and trusted-IP bypass rules.
reCAPTCHA for WooCommerce. Part of the Swift Commerce WordPress plugin.
WordPress reCAPTCHA for supported public forms.
Choose Google reCAPTCHA v2 or v3 for core WordPress and WooCommerce forms. With Pro, you can instead use Cloudflare Turnstile or hCaptcha, add more form locations, review verification results, and bypass checks for trusted roles or IP addresses.
Choose the Google check that fits the form.
Free supports reCAPTCHA v2 checkbox or invisible mode and v3 score-based verification. Enter the provider’s site and secret keys, then choose the protected locations.
A v3 score is checked against your threshold; it is not a promise that every suspicious visitor sees a challenge.
Cover the standard entry points.
Protect WordPress login, registration, password reset and comments, plus WooCommerce account login, registration and checkout.
Checkout protection covers supported classic and Checkout Block flows. Enable only the placements relevant to your site and test the live forms.
Choose from three supported providers.
Google reCAPTCHA v2 and v3 are available in Free. Pro adds Cloudflare Turnstile and hCaptcha. Choose a provider, enter its site and secret keys, then select the forms to protect.
The providers have different policies and presentation; choose one using its own account and terms rather than assuming identical behavior.
Tune a score instead of guessing what failed.
For Google v3, set the score threshold and review real submissions. Raising the threshold can catch more automation but can also reject legitimate people.
The badge or required attribution display remains a consideration when choosing a v3 presentation.
Review checks and make narrow IP exceptions.
Pro verification analytics show passed and failed checks over time and by protected form. Collection is off by default; enable it when you need reporting and choose how long to retain results. A failed check does not necessarily mean the visitor was a bot.
Pro can also skip verification for selected roles and trusted individual IP addresses or ranges. Keep your IP whitelist narrow and review it when access changes.
Extend coverage to product reviews and saved payments.
Pro protects WooCommerce product-review submissions and the Add Payment Method form in My Account. These are specific extra placements, not an arbitrary form-placement builder.
Pro also adds size and light/dark theme settings for applicable checkbox widgets.
Get the full feature.
And the rest of the suite.
One Swift Commerce Pro license unlocks the complete feature set across all 16 tools, advanced design controls and premium support. No separate purchase for reCAPTCHA.
Compare Free and Pro.
Start with the reCAPTCHA essentials in Free, or use Pro for the expanded controls shown below.
| What you can do | Free | Pro |
|---|---|---|
| Google reCAPTCHA v2 and v3 | Included | Included |
| Core WordPress and WooCommerce form protection | Included | Included |
| Classic checkout and Checkout Blocks coverage | Included | Included |
| v3 score threshold and badge settings | Included | Included |
| Cloudflare Turnstile and hCaptcha | Not included | Included |
| Product-review and Add Payment Method protection | Not included | Included |
| Trusted roles and IP-address bypass | Not included | Included |
| Checkbox theme and size controls | Not included | Included |
| Opt-in verification analytics | Not included | Included |
Questions about reCAPTCHA.
Specific answers about setup and Free versus Pro.
Is Google reCAPTCHA available in Free?
Yes. Free supports Google v2 and v3 with the corresponding keys and core form placements.
Can I use Cloudflare Turnstile?
Yes, with Pro. hCaptcha is also a Pro provider option.
Does v3 always challenge a suspicious visitor?
No. v3 returns a score that is compared with the configured threshold.
Can checkout be protected when using Checkout Blocks?
Yes. Supported checkout protection includes classic checkout and Checkout Blocks.
Can I exempt staff?
Pro offers selected-role bypass and trusted IP or range exceptions.
Does it protect every form plugin automatically?
No. The page lists verified WordPress and WooCommerce placements, not universal third-party form coverage.
Which forms are included, and which require Pro?
Free supports Google reCAPTCHA on WordPress login, registration and lost-password forms, WooCommerce login, My Account registration and checkout, and WordPress comments. Pro adds WooCommerce product reviews and Add Payment Method. A form must exist and be selected in Protection; these switches do not create a registration or checkout page.
Can each form use its own CAPTCHA provider?
No. The selected provider applies to all enabled locations. Free supports Google reCAPTCHA v2 checkbox, v2 invisible and v3. Cloudflare Turnstile and hCaptcha require Pro. Enter keys for the selected provider and version, save, then retest every protected form when changing providers.
Will role bypass skip the challenge on a logged-out login form?
No. Pro role bypass applies to users who are already signed in. Pro IP whitelist rules can exempt a matching address or supported range before sign-in, so test from an address outside that whitelist when validating login protection. Only add exceptions you trust.
What do verification analytics measure?
Pro analytics report verification outcomes for selected forms after you enable collection. A passed check is not proof of identity, a verified email address or a sale. IPs are stored as one-way fingerprints rather than raw addresses; configure retention to suit your needs.
Does CAPTCHA replace email verification or registration approval?
No. CAPTCHA checks a submission for automated abuse. Registration & Access handles inbox verification or administrator approval. Use the relevant controls together when you need both bot protection and an account-access check.
Where are the provider-specific setup guides?
Follow the Google reCAPTCHA, Cloudflare Turnstile or hCaptcha WordPress login walkthrough. For store signup, use the Turnstile WooCommerce registration guide. The full protection reference lists forms, keys, exceptions and analytics.