• kraftyjosh

    (@kraftyjosh)


    Recently our sites have been getting a lot of emails about resetting the passwords for our admin accounts. The bots must know our usernames and have been submitting the lost password form constantly. Is there any way you could expand the google recaptcha functionality that cover the login form to also cover the lost password form?

Viewing 1 replies (of 1 total)
  • Plugin Support wfscott

    (@wfscott)

    Thanks for reaching out, @kraftyjosh

    I’ve taken note of the request. Can you confirm if you’ve considered using the Wordfence security plugin for the Brute Force Protection? With the Brute Force Protection via our Wordfence Security plugin (https://www.ads-software.com/plugins/wordfence/) you can limit the number of times an IP can use the forgot password functionality via the Wordfence > All Options > Brute Force Protection area. Setting that to 3 times or so over the course of 30 minutes would be good to stop these sorts of bots.

    Thanks,
    Scott

Viewing 1 replies (of 1 total)
  • The topic ‘Add recaptcha to lost password form’ is closed to new replies.