Recaptcha on Login Page

Well i think recaptcha should only be on registration page for new users since the login page is protected itself.

Do you know how many times WordPress sites are brute force attacked? adding an extra measure of security to the login page of a site may be desired by some people. I don’t think it should be a feature that is always on once recaptcha is enabled, but a setting that can be turned on for the people
Who want it.

I’d consider adding a setting for it, similar to how the security module currently works. Perhaps, after a certain amount of failed attempts, require a captcha?

That would be great!

I took me an hour trying to figure out why it was not appearing on the login page. Yes, this is a much needed feature. Brute force attacks happen about every day on our site.

+1 for having recaptcha displayed on login after a few failed attempts.

Thanks for the plugin, Jeff!

+1. I’m also getting brute force attacks on the login page on a daily basis.

+1. Would love to add recaptcha to login, both on the login page and the login widget.

Seems pretty dumb not to have it on login page tbh…..

Hi Jeff,
Has there been any progress on this?
I’m getting locked out of my own site due to failed login attempts by bots, so I would really appreciate recaptcha on the login page ??

Chris

Chris – one way to avoid this is to change the default username from admin to something else. I always try to use 3 or 4 character abbreviation for the site+admin.

I also use this plugin in conjunction with limit login attempts which blocks login by IP address after too many failed attempts.

Hi cpaprotna,

Thanks for the suggestion. Yes, we already use an admin name different to plain old admin. Unfortunately one of the bots hit upon the correct one! We use a security plugin to block access after repeated failed logins so we were locked out for the best part of a day.
The bot appears to have moved onto different usernames now.

It’s just a shame TML only has the recaptcha on the registration page and not the login page.

Definitely +1 to this. Just got an email that my account was locked due to 20 failed password attempts. Brute force attacks are a daily thing.