Active installationsNewAdoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records Human Verification Brain Puzzle For Login Security Guard version 1.2.0 as active, updated 2mo ago and tested up to WordPress 7.0.
Overview
About this plugin
Human Verification Brain Puzzle For Login Security Guard replaces the traditional CAPTCHA with a lightweight, accessible 3×3 puzzle on the WordPress login page. Users must correctly complete the puzzle before the Log In button becomes active. The answer is also verified server-side, so it cannot be bypassed by disabling JavaScript.
How it works
A random 3×3 puzzle is displayed on the login page.
Each row and each column must contain the digits 1, 2, and 3 exactly once.
Click (or tap) an empty cell to select it, then pick a number from the picker — or press 1, 2, or 3 on your keyboard.
Once the puzzle is solved correctly, the Log In button becomes clickable.
The answer is validated server-side on submission for extra security.
Features
6 built-in puzzle variations chosen at random each visit.
Client-side validation with instant feedback (wrong cells highlighted in red).
Server-side answer verification — cannot be bypassed without JavaScript.
WP nonce protection against CSRF attacks.
Accessible: full keyboard navigation, ARIA roles and labels, aria-live status region.
No external requests — no JavaScript frameworks or CDN dependencies.
Tiny footprint: one CSS file, one JS file, one PHP class.
Fully translatable via standard WordPress i18n functions.
Matches native WordPress login page styling.
Works on the standard wp-login.php screen, the WooCommerce “My Account” login form, and the MemberPress login form.
Privacy
This plugin is stateless — it does not use PHP sessions, cookies, or any database storage. The puzzle shown to a visitor is bound to a signed WordPress nonce embedded in the form itself. No personal data is stored or transmitted to third parties.
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
captcha
login
security
spam
Compatibility & maintenance
Compatibility & maintenance
Tested up to WordPress 7.0
Not yet marked as tested with WordPress 7.1. WordPress.org currently lists Tested up to 7.0.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.0
Minimum requirementsWordPress 5.8 · PHP 7.4
Update activity15 Aug 20262mo ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
No tracked version or compatibility changes have been recorded by WP PlugIndex yet.
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
