SpamOff – Google reCaptcha for WooCommerce

SpamOff is a lightweight Google reCAPTCHA plugin for WooCommerce and WordPress that protects your website from spam, fake registrations, brute-force attacks, fake orders, comment spam, and automated bots. Easily add Google reCAPTCHA v2 or v3 to WooCommerce checkout, login, registration, guest checkout, and lost password forms, as well as WordPress login, registration, comments, and custom forms in just a few minutes.

Highlighted Features

• Supports Google reCAPTCHA v2 (checkbox) and v3 (invisible, score-based)
• Protects WooCommerce and WordPress:
  • Login
  • Registration
  • Lost Password
  • Checkout
  • Guest Checkout
  • Comments
• Customize the reCAPTCHA v3 spam score threshold
• Add reCAPTCHA to custom forms using the [spamoff_bot_protection] shortcode
• Customize the reCAPTCHA v2 theme, size, and error message
• Supports WooCommerce Classic Checkout
• Supports WooCommerce Block Checkout
• Compatible with WooCommerce HPOS (High-Performance Order Storage)

reCAPTCHA v3 (invisible, score-based) and v2 (checkbox) support
SpamOff supports both Google reCAPTCHA v2 and reCAPTCHA v3, allowing you to choose the protection method that best fits your WooCommerce and WordPress site. Use reCAPTCHA v3 for invisible, frictionless bot protection or reCAPTCHA v2 to display the familiar “I’m not a robot” checkbox.

Protect WooCommerce & WordPress Forms

Enable Google reCAPTCHA protection on the WooCommerce and WordPress forms you want to secure.

Form
Enable

WordPress Login

WordPress Registration

WordPress Lost Password

WordPress Comments

WooCommerce Login

WooCommerce Registration

WooCommerce Lost Password

WooCommerce Checkout

WooCommerce Guest Checkout

Customization Options

Option
Description

Shortcode [spamoff_bot_protection]
Manually place the captcha anywhere in a theme, page builder, or custom form.

reCAPTCHA v2 Theme
Light or Dark, to match your site design

reCAPTCHA v2 Size
Normal or Compact

Failed Verification Message
Fully editable text shown to visitors who fail the check (default: “Verification failed. Please try again.”)

Shortcode Support

Use the [spamoff_bot_protection] shortcode to add Google reCAPTCHA to custom forms, page builders, or theme templates without writing custom code.

Use Cases

• Stop fake WooCommerce orders and card-testing bots — protect Checkout and Guest Checkout with invisible v3 scoring so bots never reach payment.
• Block fake account creation — add Google reCAPTCHA to WooCommerce and WordPress registration and login forms to stop credential stuffing and brute-force attacks.
• Kill comment spam — add Google reCAPTCHA to your WordPress comment form without modifying your theme.
• Protect password resets — stop automated abuse of the Lost Password form.
• Custom forms and page builders — drop the [spamoff_bot_protection] shortcode into any form (contact forms, custom checkout fields, etc.) for coverage outside the built-in list.
• Modern WooCommerce stores on Block Checkout — get real Store API-level protection instead of a plugin that only works on the legacy Classic Checkout shortcode.

How To Use

1. Install and activate SpamOff.
2. Get a free Site Key and Secret Key at https://www.google.com/recaptcha/admin — choose v2 or v3 depending on which experience you want.
3. Go to WooCommerce → Settings → SpamOff → General Settings, paste your Site Key and Secret Key, and pick v2 or v3.
4. If using v3, set your Minimum Score (start at 0.5, lower it if real customers get blocked).
5. Go to the Advanced Settings tab and toggle on the forms you want protected (Login, Registration, Checkout, Guest Checkout, Lost Password, Comments).
6. Optional: go to Customization to set your v2 widget theme/size and edit the failure message.
7. Save changes and test by submitting a protected form as a logged-out visitor.