Works with your stack
Cookie consent for Advanced Google reCAPTCHA
the login page too
Advanced Google reCAPTCHA, also called WP Captcha, protects login, registration and comment forms. With Google’s reCAPTCHA chosen, Google’s script loads with each protected form, including the login page. Its built-in maths captcha contacts no one.
By WebFactory Ltd · getwpcaptcha.com · WordPress.org
Is this your product? Tell us if anything here is out of date. Write to us
Advanced Google reCAPTCHA
WordPress plugin
- Tested version
- 5.42
- How
- Tested automatically around each Cookie Rocks version
- Last test
- 7 November 2026
- Latest version
- 5.42 tested
- Active installs
- 200,000+
What Advanced Google reCAPTCHA adds to your visitors’ browser
No trackers In our test of Advanced Google reCAPTCHA 5.42 on 7 November 2026, the plugin itself added no tracker and no cookie. What you place in your pages with it, such as a video or a map, still counts.
What matters for consent with Advanced Google reCAPTCHA
Off until you choose
The captcha type starts disabled. Once you choose one, login, registration, lost password and comment forms are protected.
Google loads with the form
With reCAPTCHA, Google’s script is printed inside each protected form. On posts with open comments, it loads for every visitor who is not logged in.
The login page is apart
The login page is not part of your theme, so a consent plugin that works on theme pages may not see it. reCAPTCHA then loads there for every visitor.
Holding it blocks the form
Without a reCAPTCHA token the plugin refuses the form: a comment ends on an error page and is lost. The plugin has no WP Consent API support and no way to delay reCAPTCHA.
What our tests found on Advanced Google reCAPTCHA
Depends on a setting · Advanced Google reCAPTCHA (WP Captcha)WP Captcha loads Google reCAPTCHA on every post open to comments
setting “captcha” · by default: disabled
Nothing loads until a captcha type is chosen. With reCAPTCHA v2 or v3, Google's script loads in each protected form, for visitors not logged in. The built-in maths captcha contacts no other site.
Read in its code, 16 October 2026, Advanced Google reCAPTCHA (WP Captcha) 5.42.
Full detail
The captcha type defaults to disabled. Once a type is chosen, the login, registration, lost password and comment forms are protected by default (WooCommerce, EDD and BuddyPress off). With reCAPTCHA v2 or v3, Google's api.js is printed inline inside each protected form (id wpcaptcha-recaptcha-js), so it loads on every post with an open comment form for visitors who are not logged in. The free built-in type draws a maths captcha on the site and contacts no other site.
Good to know · Advanced Google reCAPTCHA (WP Captcha)Without a reCAPTCHA token, WP Captcha rejects comments and logins
A comment ends on a 403 error page and its text is lost; login forms show an error. Logged-in users skip the captcha on comments. No WP Consent API support, no hook to delay reCAPTCHA.
What to do: Ask for reCAPTCHA consent above the form, switch to the built-in captcha, or treat reCAPTCHA as necessary.
Read in its code, 16 October 2026, Advanced Google reCAPTCHA (WP Captcha) 5.42.
Full detail
Without a reCAPTCHA token the plugin refuses the submission: a comment ends on a 403 error page 'reCAPTCHA verification failed' and WordPress does not keep the text; login forms show an error. Logged-in users skip the captcha on comments. The server checks the token with Google's siteverify using the secret and token only. The plugin has no WP Consent API support and no hook to delay reCAPTCHA.
Set before the choice · Advanced Google reCAPTCHA (WP Captcha)WP Captcha loads reCAPTCHA on the login page for every visitor
wp-login.php is not a theme page, so a consent plugin that rewrites theme pages does not see Google's script there.
What to do: Use the built-in captcha if Google should not load on the login page.
Read in its code, 16 October 2026, Advanced Google reCAPTCHA (WP Captcha) 5.42.
Full detail
On wp-login.php (login, registration, lost password, all on by default once a captcha is chosen) the plugin enqueues Google's api.js through login_enqueue_scripts. wp-login.php is not a theme template, so a consent plugin that rewrites pages from template_redirect does not see it and reCAPTCHA loads there for every visitor.
How we test it
Around each version, with its latest release
Around each Cookie Rocks version, a fresh WordPress installs its latest version from WordPress.org next to Cookie Rocks and runs the same checks. A new version joins the next run on its own.
- Advanced Google reCAPTCHA 5.42, tested on 7 November 2026.
- The banner shows, the trackers of the test page wait for consent and load after it, and Cookie Rocks raises no PHP error.
- Settings of the test: Default settings after activation.
- Last run: Advanced Google reCAPTCHA 5.42 on 7 November 2026, with WordPress 7.1.3.
Anti-spam
Other plugins of the same kind.
Questions
What are my options?
Ask for reCAPTCHA consent above the form, treat reCAPTCHA as necessary, or switch to the built-in captcha, which contacts no other site.
What happens after the 30-day trial?
The banner, your visitors’ choices and your proofs of consent keep working. Without a key, most settings lock, updates and support stop. Take a key at any time and everything opens again.
For sites with WP Captcha
Forms that still send.
choose your captcha
Every feature of the complete plugin for 30 days, no card.
- During the trial: everything, including the full settings and the scans
- After 30 days without a key: the banner, your visitors’ choices and your proofs of consent keep working
- What waits for a key: most settings, updates and support
Get your trial key
Your e-mail and your site. Your key arrives as soon as you confirm your e-mail.