The plugin behind this used to be called BuddyPress reCaptcha and is now sold as Wbcom Captcha Manager, same product, same developer, updated name. It adds Google reCAPTCHA to BuddyPress registration, WordPress login, and WooCommerce forms, all from one settings screen.
Actual Setup Steps
1. Get reCAPTCHA keys from Google. Head to google.com/recaptcha and register your site. You’ll get a site key and a secret key.
2. Install Wbcom Captcha Manager. No separate reCAPTCHA plugin needed, this is the plugin that does the integration. Install and activate it (BuddyPress must already be active).
3. Choose your reCAPTCHA version. The plugin supports both v2 (the familiar checkbox challenge) and v3 (invisible, scoring-based, no user interaction required). Pick whichever fits your site, v3 is less intrusive but gives you less direct control over what gets blocked.
4. Paste in your keys. Enter the site key and secret key from step 1 into the plugin’s settings page. Choose which forms get protected, WordPress login/registration, BuddyPress registration, WooCommerce checkout and account forms.
5. Test it. Register a test account or attempt a login to confirm the challenge (or invisible scoring, for v3) is actually running before you rely on it.
What to Expect
reCAPTCHA reduces spam registrations and bot login attempts significantly, but it isn’t a complete block on automated abuse, pair it with other basics like rate limiting or a spam-comment plugin if your site is a heavy target.
Pricing
Free (v2.0.2, updated within the last few months). Download it here.