內容簡介
InfoPeak Captcha 外掛能有效阻擋機器人攻擊，並且不會干擾訪客的使用體驗。它透過背景運算挑戰來驗證使用者，無需收集個人資料，並完全在歐盟內部運行，確保資料安全。
【主要功能】
• 防止機器人攻擊，保護網站表單
• 無需個人資料，完全在歐盟內運行
• 無需解題，使用者體驗流暢
• 每月提供 10,000 次免費驗證
• 簡單設定，兩分鐘完成安裝
外掛標籤
開發者團隊
原文外掛簡介
InfoPeak Captcha stops bots without bothering your visitors and without sending their data to the US.
Instead of tracking visitors or making them click traffic lights, it uses proof-of-work: the visitor’s browser solves a small computational challenge in the background, the moment they start filling in a form. Bots pay a CPU cost that makes mass abuse expensive; humans wait a fraction of a second and never see a puzzle.
Why site owners choose it
No personal data leaves the EU. The service is hosted entirely in the EU. No US transfer, no CLOUD Act exposure.
No cookies, no tracking. Nothing to declare in your cookie banner for the captcha.
Nothing to solve. No image grids, no distorted text, nothing to click. Fully accessible by design.
Free plan. 10,000 verifications per month at no cost.
What this plugin protects
Login form
Registration form
Lost-password form
Comment form (with an option to skip logged-in users)
Each can be toggled individually on the settings page.
Setup takes two minutes
Create a free sitekey and secret at infopeak.io/captcha
Paste them into Settings → InfoPeak Captcha
Done – the widget appears on your forms and verification happens automatically
You can try the plugin first with the public test credentials ipk_test_sitekey / ipk_test_secret – they work on any domain and never count against a quota.
External services
This plugin relies on the InfoPeak Captcha service to do its job. The service is operated by InfoPeak and hosted entirely in the EU.
It is used for two things:
Loading the captcha widget. The script https://captcha.infopeak.io/infopeak-captcha.js is loaded in the visitor’s browser on the pages where a protected form appears. The browser then requests a challenge and submits the solved proof of work. This sends the site’s public sitekey and the computed solution. No cookies are set and no visitor is tracked.
Verifying submissions. When a protected form is submitted, your server sends the captcha token together with your sitekey and secret to https://captcha.infopeak.io/api/v1/pow/siteverify and receives back whether the token is valid. Nothing about the visitor is included.
No personal data about your visitors is stored by the service. See the privacy policy and the terms of service.
