reCAPTCHA V3 for Jetpack

Description

reCAPTCHA V3 for Jetpack enhances your WordPress site’s security by integrating Google reCAPTCHA v3—an invisible, score-based spam filter—with Jetpack contact forms, comments, and WooCommerce registration. Designed for block-based themes (e.g., Full Site Editing), it uses behavioral scoring to block bots seamlessly. Key features:

• Invisible Protection: Analyzes user behavior (e.g., mouse movements, session duration) to assign a score (0.0–1.0) for contact forms, comments, and WooCommerce registration.
• Customizable Threshold: Set a score threshold (default 0.5) to balance spam blocking and user access for all forms.
• Conditional Loading: Control where reCAPTCHA loads: on all pages, specific page types (e.g., front page, single posts), or specific slugs. Improves performance by skipping unnecessary pages.
• Debug Mode: Toggle console.log output for debugging purposes; disable for production to reduce browser console clutter.
• Skip for Logged-in Users (new in 1.17): New checkbox to bypass reCAPTCHA entirely for any logged-in user (admins, customers, members, etc.). Perfect for membership sites where only guests need protection.
• Automatic Spam Handling:
  • Form submissions with scores below the threshold are reliably blocked and moved to the Jetpack Feedback CPT spam folder in the admin interface.
  • Comments with scores below the threshold are automatically moved to the spam folder without triggering approval emails.
  • New in 1.13 / 1.14: Blocks bot account creation on WooCommerce registration form (including the My Account page).
• Submission Stats & Logging (improved in 1.19): Tracks total submissions and logs the last 20 submissions (forms, comments, registration) with scores, status, and now the client IP address. Includes a secure “Clear Log” button and cleaner, shorter messages for better readability.
• Jetpack Integration: Requires Jetpack for contact form and comment protection, fully compatible with block-based forms and Jetpack forums.
• Email Enhancements: Appends reCAPTCHA scores to Jetpack form submission emails for transparency.
• Admin Feedback: Displays reCAPTCHA scores to admins on form success pages and logs detailed debug info for failed submissions.
• Customizable User Notices (new in 1.21): Change the messages shown to users when a reCAPTCHA token is missing or when the score falls below your threshold. Supports {score} and {threshold} placeholders.

Perfect for modern WordPress sites, this plugin provides robust spam prevention with insightful analytics, ensuring a seamless user experience while keeping your forms, comments, and registrations spam-free.

External Services

This plugin uses Google reCAPTCHA v3, a service provided by Google to verify user interactions and prevent spam on contact forms, comments, and WooCommerce registration.

• Purpose: Google reCAPTCHA v3 analyzes user behavior to assign a score (0.0–1.0) indicating the likelihood of a user being a bot. This score determines whether form submissions, comments, or registrations are blocked (moved to spam).
• Data Sent: When a user submits a form, comment, or registers, the plugin sends a reCAPTCHA token to Google’s API (https://www.google.com/recaptcha/api/siteverify). The request includes the secret key, the response token, and the server’s REMOTE_ADDR as remoteip. Proxy headers such as X-Forwarded-For are not sent.
• When Data is Sent: Data is sent to Google’s API on every Jetpack contact form, comment, or WooCommerce registration submission.
• Service Provider: Google LLC.
• Terms of Service: https://www.google.com/recaptcha/about/
• Privacy Policy: https://policies.google.com/privacy

Users must agree to Google’s terms of service when setting up reCAPTCHA keys. No user consent is required for reCAPTCHA v3, as it operates invisibly without challenges.

License

This plugin is licensed under the GPLv2 or later. See https://www.gnu.org/licenses/gpl-2.0.html for details.

Technical details