The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Simple Login Captcha
Adds a simple 3-digit number captcha on the login form.
The facts
- Rating
- 3.9★ from 17
- Active installs
- 10k+
- Price
- Free
- Last updated
- 26 May 2026
- Added
- Apr 2019
- Requires WP
- 3.5
- Tested up to
- WP 7.0.4
- Requires PHP
- 5.2
- Downloads
- 77,858
Our analysis
AI-assistedSimple Login Captcha is a WordPress plugin designed to add a basic captcha to the login form. Users must enter a random 3-digit number displayed above the input field to successfully log in. This plugin is suitable for those looking for a straightforward method to deter automated login attempts without complex configurations.
The plugin is compatible with the WooCommerce login form and multisite setups. It does not collect personal data or use advanced features like image generation or API integrations, making it a lightweight option for basic security needs.
Best for: This plugin suits WordPress site owners looking for a basic anti-bot measure for their login forms.
What it does well
- ✓Adds a simple captcha to the WordPress login form
- ✓Compatible with WooCommerce and multisite
- ✓No complicated features or settings required
- ✓Lightweight with no personal data collection
- ✓No vulnerabilities in the programming code
Where it falls short
- •May be bypassed by specifically designed bots
- •Lacks advanced security features
Verdict
Simple Login Captcha provides a no-frills approach to login security. It may be adequate for basic protection but has limitations against advanced threats.
From the developer
Nikolay Nikolov's own description of Simple Login Captcha, lightly tidied.
A simple captcha for the WordPress login form. To be able to login, the user is required to enter a random 3-digit number in a text field.
The correct number is displayed above the field by a small JavaScript code. Compatible with the WooCommerce login form. Compatible with multisite.
Demo
https://nikolaydev.com/wp-login.php
Simple
- No complicated features
- No settings
- No image generation
- No API
- No sessions
- No cookies
- No IP address detection
- No personal data collection
- No vulnerabilities in the programming code
Recommendation
Bots can also try to login with the XML-RPC feature of WordPress! Very rarely plugins also need this (like the Jetpack plugin). But if you don’t use it, I recommend that you disable it. You can use the super simple one-line plugin Disable XML-RPC.
Notice
This is a simple plugin designed to protect against random bots that try to login on your site. But if a person actually looks at the code of this plugin and specifically designs a new bot that targets this plugin, this bot would be able to bypass the protection.
Tagged as
Alternatives
Other plugins for stopping spam.
Allows administrators to globally disable comments on their site. Comments can be disabled according to post t...
Free
1M+ installs 4.7★ (280)
Antispam Bee
92Sophisticated antispam plugin for effective daily comment and trackback spam-fighting. Built with data protect...
Free
700k+ installs 4.8★ (226)
Top-rated antispam for contact forms, comments, WooCommerce, eCommerce, and login. No CAPTCHAs, no friction, j...
Free
200k+ installs 4.8★ (3,208)
Adds reCaptcha v2 from Contact Form 7 5.0.5 that was dropped on Contact Form 7 5.1
Free
200k+ installs 5★ (89)
Captcha protection against spam comments & brute force login attacks using Google reCAPTCHA.
Free
200k+ installs 4.8★ (430)