Protect the forms your visitors actually use.
The same lockout, CAPTCHA and bot checks that guard wp-login, extended to your shop, your forms and your comments. Anything else can join with a few lines of code.
Protect every door in My Account.
Each customer-facing form has its own toggle, so you protect exactly what you want. Themes that use WooCommerce’s standard login and registration hooks are covered automatically.
- Five forms: login, registration, lost password, checkout and order tracking.
- All the protections: geo rules, lockout, honeypot, CAPTCHA and the JavaScript check.
- Passkeys and magic links on the My Account login form.
- A “Login & security” tab where customers manage passkeys, two-factor and sign-in options without ever seeing wp-admin.
- 2FA happens in My Account, styled by your theme, instead of bouncing to wp-login.php.
Bots out, real messages in.
Bricks Builder, SureForms and WordPress comments get your CAPTCHA widget and the JavaScript presence check. Bots are rejected before the message is saved or sent.
- Uses your existing provider. Pick the CAPTCHA once in the Widget tab and every protected form follows it.
- Bots are stopped cheaply. The JavaScript check runs before CAPTCHA, which saves your provider quota.
- Every block is logged, with the form it came from.
- One switch per integration in the Integrations tab. Nothing loads on pages that don’t have a protected form.
Any form, with two function calls.
Custom contact forms, theme templates, page-builder login forms or a headless front end can all use the same protection. No class to set up and no hooks to register.
- Template tags and shortcodes for the widget, passkey button, magic-link form and account security panel.
- 20+ actions and filters to adapt behavior to your site.
- REST routes under
nahnls/v1and awindow.NAHNLSAuthJavaScript API for React, mobile and headless setups. - Membership plugins and custom login forms can add passkeys and magic links with a shortcode.
Using something we don’t cover yet?
Tell us which plugin you use. Integrations are added based on what people ask for, and the developer API works in the meantime.
Protect your forms in minutes.
Free, with every integration included. No license key and no upsell.
Install from WordPress.org