ANON vs Captchinoo, admin login page protection with Google recaptcha

This plugin allows you to embed ANON::form’s E2EE (End-to-End Encrypted) secure and anonymized web forms into your website with an iframe and with a shortcode. The requirements for secure communication with secure forms and storage of sensitive information are steadily increasing, not least from authorities through GDPR and the protection of whistleblowers. Something that is often overlooked but directly affected by the new requirements is the web forms used on the web pages and websites to create contact or collect information, with email as transport. ANON::form is a complete, easy-to-implement and scalable solution for secure electronic web-based forms that meet all existing requirements for not only security but also anonymity and (un)traceability. Create a Whistleblower Channel using secure e-forms ANON::form’s secure and anonymous e-forms meet the requirements of a secure whistleblowing channel. Simple and cost-effective (from €5/month), pay only for what you really need. Read more. ANON::form is secure and anonymized Meets safety requirements ANON::form is a service that meets the requirements for security according to the respective standard for: EU/GDPR + EU/Schrems II CH/revFADP UK/FCA US/SOX PCI-DSS + HIPAA + NIST and receives the rating A+ from Qualsys SSL Labs and ImmuniWeb. ANON::form follows the Zero Trust framework for a secure infrastructure. All certificates are encrypted with SHA256/RSA 2048 bits/TLS 1.2 + 1.3. Meets the requirement for Zero Access Encryption ANON::form does not store form data and meets the requirement for Zero Access Encryption, suppliers who receive form data from ANON::form comply with Zero Access Encryption in that all data stored is encrypted via endpoints (E2EE) with personal keys. Meets the requirement for privacy ANON::form fulfills the requirement for anonymity in that no traffic, error or other logs are activated (No-Log Policy), all form data is sent encrypted directly to receiving systems without intermediaries. Nothing is saved in the computer or browser by the service, but the use of incognito windows, or even better Tor Browser, is recommended to prevent sensitive data from being saved by the browser’s own functions. Protected against malicious code ANON::form is protected against malicious code by cleaning up all form data before it is processed by the server system. We do not have any online editing of forms, everything is uploaded manually by us after virus and other security checks. All services are run on own servers in secure datacenters. The encryption software we use is open source (OpenPGP) which is constantly reviewed by a large community spread all over the world. Spam protection All forms have Captcha protection against robot-generated spam. The Captcha function is locally installed and does not download anything from external sources such as Google. The forms also support hCaptcha, which offers better spam protection but poorer anonymity through increased traceability. EU/EN 301549 and W3C/WCAG 2.1 AA Compliance All forms meet the accessibility requirements according to EU Directive 2016/2102 and other corresponding directives in different countries according to WCAG 2.0/2.1 AA and associated legislation. Pre-built form templates ANON::form comes with pre-built form templates, both embedded and stand-alone with or whitout attachment, to help you save time. You can add, remove, or re-arrange fields as necessary. Or create special forms for handling sensitive data such as sick leave. Pre-built form templates: Contact form; a standard contact form Whistleblower forms; approved for use as a whistleblower channel, can also be used as a tip form for journalists etc Tip form; anonymous option for journalists, media and others who want to receive non-whistleblowing tips Sick leave form; a simple and quick way to report sickness absence with the mobile phone, pad or computer Currently available in 42 languages ANON::form forms support Albanian, Arabic, Bosnian, Bulgarian, Catalan, Croatian, Czech, Danish, Dutch, English, Estonian, Filipino, Finnish, Frensh, German, Greek, Hindi, Hungarian, Icelandic, Indonesian, Irish, Italian, Latvian, Lithuanian, Malay, Maltese, Norwegian, Persian, Polish, Portuguese, Romanian, Russian, Serbian, Slovak, Slovenian, Spanish, Swahili, Swedish, Tamil, Thai, Turkish, Ukrainian Mobile Ready and Optimized for Speed ANON::form forms are 100% responsive and mobile-friendly by default. We also optimized both the frontend and the backend to ensure maximum speed. How to use it ANON::form E2EE forms are web forms where the form data is encrypted in the browser and then sent as email via an encrypted and anonymized channel established by ANON::form’s servers. The recipient can be any email client that can decrypt PGP, we recommend a free account with Proton Read more

Your login page is the single most attacked page on any WordPress site. Bots hit wp-login.php around the clock, guessing username and password combinations thousands of times a day. Captchinoo puts a human verification step in front of that form, so automated scripts are stopped before they ever reach your password check. Install it, pick the captcha style you like, and you are protected. There is nothing else to configure. Three captcha styles, one click apart Slide to unlock — a lightweight swipe slider, just like unlocking a phone. No external service, no API keys, works on desktop and touch devices. Icon captcha — the visitor picks the one icon that does not belong in the row. Friendly, image based, and no typing required. Google reCAPTCHA v2 — the familiar “I’m not a robot” checkbox, backed by Google’s own bot detection. Why site owners choose Captchinoo No puzzles to read. No distorted letters and no math questions. Your users are not punished for logging in. Genuinely lightweight. Only the assets for the captcha you actually selected are loaded, and only on the login page. Nothing is queued on the front end of your site. Works with caching. The login page is never cached by page caching plugins, so Captchinoo stays reliable where other captcha plugins break. Translation ready. Every string is translatable and the plugin ships with full text domain support. Zero configuration required. The slide captcha works the moment you activate the plugin — no account, no keys, no signup. Captchinoo Pro — three more ways to lock down your login The free plugin gives you three captcha styles for your WordPress login form. Captchinoo Pro adds three stronger layers on top: Two factor authentication (2FA) — the most powerful protection in the plugin. 2FA adds a second identity check on top of the password: the user confirms the login from their mobile device, so a stolen, leaked, or guessed password on its own is no longer enough to get into your site. Google reCAPTCHA v3 — invisible protection that never interrupts your users. Instead of asking anyone to click a box or solve a challenge, reCAPTCHA v3 scores each visitor silently in the background from their interactions with your site. You can run it everywhere without affecting your conversion rate, and it works best when it has the most context about how people use your site. hCaptcha — an independent alternative to Google’s service. hCaptcha blocks automated bots, spam, and abuse by asking visitors to complete a simple verification challenge, and it is the popular choice for site owners who would rather not route their traffic through Google. Pro includes everything in the free version, so you can switch between all six captcha styles at any time. External services This plugin can optionally use Google reCAPTCHA, a third party service, and only when you explicitly select “Google reCAPTCHA” as your captcha type and enter your own API keys. When that option is active, the visitor’s browser loads Google’s reCAPTCHA script from https://www.google.com/recaptcha/api.js, and your server sends the captcha response token together with the visitor’s IP address to https://www.google.com/recaptcha/api/siteverify in order to confirm the challenge was solved. No data is transmitted to Google when the Slide or Icon captcha is selected, and the plugin never sends data anywhere else. Google’s terms and privacy policy apply to that service: Terms of Service — Privacy Policy. Support If you have a problem, a question, or a feature request, please open a thread in the support forum. We answer every one. If Captchinoo helps keep your site safe, a review would mean a lot to us.