{"id":1140,"date":"2020-07-26T08:06:20","date_gmt":"2020-07-26T08:06:20","guid":{"rendered":"https:\/\/meetanshi.com\/blog\/2020\/07\/26\/captcha-for-admin-login-magento-2\/"},"modified":"2025-05-21T17:53:11","modified_gmt":"2025-05-21T12:23:11","slug":"captcha-for-admin-login-magento-2","status":"publish","type":"post","link":"https:\/\/meetanshi.com\/blog\/captcha-for-admin-login-magento-2\/","title":{"rendered":"How to Enable CAPTCHA for Admin Login in Magento 2"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Generally, Magento 2 owners focus so much on customer security that stays on the frontend; they often neglect the importance of having security for the backend side.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Having amazing security in Magento 2 website for admin login is very important because the complete website handling is being done from in the backend using the admin panel.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To safeguard your Magento 2 frontend forms from spam and bot attacks, you can&nbsp;<a href=\"https:\/\/meetanshi.com\/blog\/add-google-recaptcha-to-magento-2\/\" target=\"_blank\" rel=\"noreferrer noopener\">add Google RECAPTCHA in Magento 2<\/a>. Backend or admin login security is as important as frontend and default Magento 2 provides the facility to improve the security of the admin login by enabling captcha. Even if the admin tries to hit the login button multiple times, the admin user has to enter captcha to login to the Magento 2 admin panel.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">According to Wikipedia,&nbsp;A&nbsp;<a href=\"https:\/\/en.wikipedia.org\/wiki\/CAPTCHA\" target=\"_blank\" rel=\"noreferrer noopener\">CAPTCHA<\/a>&nbsp;\u2013 Completely Automated Public Turing Test to tell Computers and Humans Apart,&nbsp;is a type of&nbsp;challenge-response&nbsp;test used in&nbsp;computing&nbsp;to determine whether or not the user is human.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In general terminology, CAPTCHA is a program that distinguishes human from the machine input basically to stop spams from extracting data from a website.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Earlier, I posted many solutions that ease the administration for store admins in Magento 2 such as&nbsp;<a href=\"https:\/\/meetanshi.com\/blog\/change-the-admin-startup-page-in-magento-2\/\" target=\"_blank\" rel=\"noreferrer noopener\">changing the admin startup page in Magento 2<\/a>. Today, I have come up with the steps to&nbsp;<em><strong>enable captcha for admin login in Magento 2<\/strong><\/em>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Steps to Enable CAPTCHA for Admin Login in Magento 2<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">1. Log in to Magento 2 Admin Panel and go to Stores &gt; Configuration &gt; Advanced &gt; Admin &gt; CAPTCHA<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2. Select YES to enable CAPTCHA for the admin login.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">3. Select the font&nbsp;to be used for the CAPTCHA display.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">4. Select the admin forms where you want to enable CAPTCHA.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">5. Set displaying mode to always to show CAPTCHA for&nbsp;each login attempt.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">6. Enter CAPTCHA timeout in minutes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">7. Enter a range of the number of symbols to be used in the CAPTCHA display.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">8. Set Case Sensitive option to YES to match the admin user\u2019s CAPTCHA case-sensitively.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">9. Save the configuration.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" src=\"https:\/\/meetanshi.com\/blog\/wp-content\/uploads\/2020\/07\/Captcha.png\" alt=\"enable captcha for magento 2 admin login\" class=\"wp-image-9838\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Once the CAPTCHA is configured for the Magento 2 admin user login, you can see it enabled while login to your backend.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" src=\"https:\/\/meetanshi.com\/blog\/wp-content\/uploads\/2020\/07\/CAPTCHA-enabled-for-magento-2-admin-login.png\" alt=\"CAPTCHA enabled for the magento 2 admin login\" class=\"wp-image-9839\" style=\"width:275px;height:auto\"\/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">That\u2019s it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You can also refer to the video tutorial to Enable CAPTCHA for Admin Login in Magento 2 from our&nbsp;<a href=\"https:\/\/www.youtube.com\/playlist?list=PLBTOxSAJzwEjM5MilmEqj98Ib80tKBu7r\" target=\"_blank\" rel=\"noreferrer noopener\">Magento 2 video tutorial<\/a>&nbsp;series:<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"How to Enable CAPTCHA for Admin Login in Magento 2\" width=\"500\" height=\"281\" src=\"https:\/\/www.youtube.com\/embed\/qVeRm1uqoys?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Enabling CAPTCHA provides better security to the Magento 2 backend. Sometimes in situations where password is forgotten or you need quick access. In these cases, <a href=\"https:\/\/meetanshi.com\/blog\/magento-2-admin-login-without-password-root-script\/\">using a root script  log in without a password<\/a>. By combining this with CAPTCHA, you can add another layer of security, ensuring your admin panel remains safe from unauthorized attempts.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Thank you!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Generally, Magento 2 owners focus so much on customer security that stays on the frontend; they often neglect the importance of having security for the&#8230;<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[34],"tags":[],"class_list":["post-1140","post","type-post","status-publish","format-standard","hentry","category-magento"],"acf":[],"_links":{"self":[{"href":"https:\/\/meetanshi.com\/blog\/wp-json\/wp\/v2\/posts\/1140","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/meetanshi.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/meetanshi.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/meetanshi.com\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/meetanshi.com\/blog\/wp-json\/wp\/v2\/comments?post=1140"}],"version-history":[{"count":2,"href":"https:\/\/meetanshi.com\/blog\/wp-json\/wp\/v2\/posts\/1140\/revisions"}],"predecessor-version":[{"id":13990,"href":"https:\/\/meetanshi.com\/blog\/wp-json\/wp\/v2\/posts\/1140\/revisions\/13990"}],"wp:attachment":[{"href":"https:\/\/meetanshi.com\/blog\/wp-json\/wp\/v2\/media?parent=1140"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/meetanshi.com\/blog\/wp-json\/wp\/v2\/categories?post=1140"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/meetanshi.com\/blog\/wp-json\/wp\/v2\/tags?post=1140"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}