Captchinoo Captcha & 2FA (PRO) 2.2

Captchinoo Captcha & 2FA (PRO) is a comprehensive security plugin for WordPress that combines anti-spam bot protection with two-factor authentication. Developed by wp-buy, it is designed to secure the most vulnerable entry points of your website, such as login forms, registration pages, and WooCommerce checkouts.

Unlike basic CAPTCHA plugins, this Pro version includes mobile-based 2FA to ensure that even if a password is stolen, the account remains protected.

## Core Features (PRO Version)

Multiple CAPTCHA Types:

Google reCAPTCHA: Supports v2 (Checkbox), v2 (Invisible), and v3 (Score-based).

Slide to Unlock: An iPhone-style "slide to verify" interaction that is highly mobile-friendly.

Icon CAPTCHA: Users must select a specific icon from a set to prove they are human.

Two-Factor Authentication (2FA): * Integrates with the Google Authenticator App and other TOTP-based apps (like Authy or Microsoft Authenticator).

Provides a second layer of security by requiring a mobile-generated code during login.

WooCommerce Integration: Specifically protects WooCommerce sensitive pages, including:

Login and Registration.

Lost Password.

Checkout Page: Prevents "carding" attacks where bots test stolen credit cards by placing hundreds of small orders.

Advanced Security Logic:

Role-Based Rules: Enable or disable CAPTCHA/2FA for specific user roles (e.g., skip for Admins but require for Customers).

IP Whitelisting: Allow trusted IP addresses to bypass security checks to avoid friction for your team.

Custom Error Messages: Full control over the text users see when they fail a verification attempt.

## Why Use the PRO Version?

While the free version of Captchinoo protects the basic admin login, the PRO version is essential for commercial or high-traffic sites because of:

Mobile 2FA: This is the single most effective way to prevent account takeovers.

Checkout Protection: Essential for e-commerce to prevent bot-driven "fake" orders or payment fraud.

V3 Score Adjustment: Allows you to fine-tune how strict Google reCAPTCHA v3 should be (e.g., blocking only users with a high probability of being a bot).

## Pricing & Licensing (2025)

As of late 2025, the official pricing from wp-buy typically ranges between:

Single Site License: ~$29 (One-time purchase or annual, depending on the bundle).

Extended License (5+ Sites): ~$49.

Security Note: While "GPL" versions of this plugin are available on various discount sites for as low as $5, it is highly recommended to purchase from the official developer for 2FA security plugins. Official versions ensure you receive immediate security patches and that the code handling your authentication hasn't been tampered with.

## Setup Quick-Start

API Keys: Register your site at Google reCAPTCHA to get your Site Key and Secret Key.

Settings: In WordPress, go to Captchinoo > Settings and enter your keys.

Activate 2FA: Go to the 2FA tab and enable it for your desired roles. Users will see a QR code to scan with their mobile app on their next login or in their "My Account" profile.

Would you like me to walk you through how to sync your Google Authenticator app with the plugin, or do you need help setting up the WooCommerce checkout CAPTCHA?