Free WordPress Login Math CAPTCHA Plugin - Block Bots Without API Keys
Most WordPress login captcha plugins force you to sign up for Google reCAPTCHA or Cloudflare – both require API keys, account setups, and third-party dependencies. HSArticle Login Math Verification takes a different approach. It adds a simple math question to your WordPress login page that blocks bots and brute-force attacks instantly. No API keys. No external services. No paid plans. Just install, activate, and you’re protected.

Why Your WordPress Login Page Needs Protection
Your WordPress login page (/wp-admin) is the most targeted page on your site. Bots run thousands of automated login attempts every day trying to guess passwords – this is called a brute-force attack. Without any protection, your site is wide open.
A login CAPTCHA stops bots before they even attempt to log in by adding a human verification step they can’t solve.
What is HSArticle Login Math Verification?
01
How It Works
02
What Makes It Different
03
Built-in Admin Dashboard
How to Install
From WordPress.org
- Go to your WordPress dashboard
- Navigate to Plugins → Add New
- Search for HSArticle Login Math Verification
- Click Install Now then Activate
- Go to Settings → Login Math Verification to configure
Option 2 — Manual Upload
- Download the plugin ZIP from WordPress.org
- Go to Plugins → Add New → Upload Plugin
- Upload the ZIP file and click Install Now
- Activate the plugin
- Go to Settings → Login Math Verification
Plugin Settings Explained
01
Enable / Disable Captcha
02
Accent Color
03
Login Stats
Frequently Asked Questions
Does this plugin require any API keys?
No. Everything runs on your WordPress server using PHP and WordPress transients. No Google account, no Cloudflare account, nothing external needed.
Will this slow down my website?
No. The plugin only loads on the /wp-login.php page and the admin settings page. Zero impact on your front-end site speed or Core Web Vitals.
What happens if the captcha expires?
Each captcha token is valid for 10 minutes. If it expires, the user simply refreshes the login page to get a new math question.
Does it work with WooCommerce login?
The plugin currently protects the default WordPress login page (wp-login.php). WooCommerce My Account login support is planned for a future version.
Will it block admin users from logging in?
No. It only blocks users who submit the wrong answer or skip the captcha field entirely. Any human who can solve a simple math problem will log in without any issue.
What happens when I uninstall the plugin?
All plugin settings, stats counters, and captcha transients are automatically removed from your database when you delete the plugin via the WordPress admin.
Is it compatible with my theme?
Yes. The plugin hooks into WordPress core login functions and works with any theme. The light and dark login page styling only applies to wp-login.php - your front-end theme is completely unaffected.
Does it work with multisite?
The plugin has not been tested on WordPress multisite yet. Single site installations are fully supported.
Download HSArticle WordPress Login Math CAPTCHA Plugin
WordPress Login Math CAPTCHA is 100% free and open source. Download it directly from the official WordPress Plugin Directory.