FAIR

Federated and Independent Repositories

HSArticle Login Math Verification

Plugin Banner

HSArticle Login Math Verification

by hsarticle

Download
Description

HSArticle Login Math Verification protects your WordPress login page from bots and brute-force attacks using a simple math question. No Google reCAPTCHA, no Cloudflare, no API keys required.

Features

  • Math captcha (e.g. “8 + 5 = ?”) on the login page
  • Answer signed directly into the form token, no server-side storage or PHP sessions needed
  • Beautiful light and dark-themed login page design
  • Customizable accent color with live preview
  • Enable/disable toggle from admin settings
  • Login attempt stats (passed vs. blocked) in the admin dashboard
  • Lightweight — no external scripts loaded on the front end
  1. Upload the hsarticle-login-math-verification folder to /wp-content/plugins/
  2. Activate the plugin from the Plugins menu in WordPress
  3. Go to Settings Login Math Verification to configure
Does this require any API keys?

No. Everything runs on your WordPress server using PHP. The captcha answer is signed into a token embedded in the login form, so there is nothing stored on the server to look up.

Will this slow down my site?

No. The plugin only loads on the login page and admin settings page.

What if the captcha expires?

Each captcha token is valid for 10 minutes. If it expires, the user just needs to refresh the login page.

What happens when I uninstall the plugin?

All plugin settings are automatically cleaned from your database when you delete the plugin via the WordPress admin, including any leftover captcha data from older versions.

Excellent plugin for additional security

By iqbalresources on July 17, 2026

I'm use this plugin as additional security layer for my login page, since the native cloudflare didn't have manual tick button to ensure only human can proceed with login. So after looking around, this math verification fits well into my login page, which Im paired it with cloudflare. Works well so far. Thanks!

1.0.3

  • Captcha no longer relies on WordPress transients for storing the answer
  • Fixes “incorrect answer” errors on sites where page caching, a CDN, or a persistent object cache prevented the transient from being read back correctly
  • Answer is now signed directly into the form token (HMAC), verified with no server-side lookup

1.0.1

  • Plugin renamed to HSArticle Login Math Verification with new slug hsarticle-login-math-verification
  • All prefixes updated from slc_ to almv_ throughout
  • Inline CSS moved to wp_add_inline_style() — no more raw style tags
  • Inline JS moved to wp_add_inline_script() — no more raw script tags
  • Google Fonts loaded via wp_enqueue_style() on both login and admin pages
  • Stat counters (passed/blocked) now increment correctly on each login attempt
  • All text domain references updated to hsarticle-login-math-verification

1.0.0

  • Initial release
Back to top