Block bots at every entry point of your Odoo site

Multi-provider CAPTCHA protection for login, signup, password reset, and website forms — with brute-force lockout, exemptions, and attempt analytics that prove it is working. Choose Google reCAPTCHA v2/v3, Cloudflare Turnstile, or a GDPR-safe self-hosted challenge, and switch anytime from Settings.

The problem

Odoo's public forms — signup, login, password reset, and website forms — are wide open to bots. Fake signups pollute the portal, credential-stuffing hammers the login page, and spam floods every contact form. Odoo's native reCAPTCHA support covers only a fraction of that surface, offers no provider choice, no lockout, and no visibility into what is actually being blocked.

The solution

Signup & Login CAPTCHA Suite adds one control point over Odoo's CAPTCHA pipeline: pick a provider per website, protect each form independently, lock out repeat offenders, whitelist trusted accounts, and watch every pass, block, and score land in a built-in attempt-log dashboard.

Capabilities

Everything you need to stop bots

Every capability below is implemented in the module.

01

Four CAPTCHA Providers, One Switch

Choose Google reCAPTCHA v2 (checkbox), reCAPTCHA v3 (score-based), Cloudflare Turnstile, or a self-hosted math challenge that makes zero external calls — change providers per website from Settings, no reinstall.

02

Per-Form Protection Toggles

Independently enable or disable CAPTCHA on Login, Signup, Password Reset, and Website Forms, so you protect exactly the surfaces that need it.

03

GDPR-Safe Self-Hosted Mode

The built-in math CAPTCHA runs entirely inside Odoo with no external requests and no visitor data sent to Google or Cloudflare — a first-class option for privacy-conscious sites.

04

Brute-Force Login Lockout

Lock out a login/IP pair after a configurable number of failed attempts within a time window, with an adjustable lockout duration to shut down credential-stuffing attacks.

05

Trusted User & IP Exemptions

Whitelist specific users, logins, or integration IP addresses so trusted accounts and automations skip the CAPTCHA challenge entirely.

06

Attempt Analytics Dashboard

Every pass, block, exemption, and error is logged with form type, provider, and reCAPTCHA v3 score, with graph and pivot views that prove your protection is actually working.

07

Blocked-Attempt Logging with IP & Timestamp

Investigate abuse after the fact with a full log of blocked attempts including IP address, attempted login, and timestamp for every form.

08

Custom Failure Messages Per Form

Set your own CAPTCHA failure message for Login, Signup, Password Reset, and Website Forms so visitors see clear, on-brand guidance when a challenge fails.

09

Multi-Website Configuration

Run a different CAPTCHA provider and rule set on each website in a multi-website Odoo instance, with a global default that applies wherever no override exists.

Workflow

How it works

1

Pick Your Provider

Open Settings, choose reCAPTCHA v2, v3, Turnstile, or self-hosted, and enter your keys if the provider needs them.

2

Protect Your Forms

Toggle CAPTCHA on for Login, Signup, Password Reset, and Website Forms, and set the failure message for each.

3

Set Lockout & Exemptions

Configure the failed-attempt threshold and lockout duration, then whitelist trusted users, logins, or integration IPs.

4

Watch the Dashboard

Open the attempt-log dashboard to see every pass, block, and score, and confirm bots are being stopped.

Questions

Frequently asked

No sales fog. If your question isn't here, email us and we'll answer it the same way.

Google reCAPTCHA v2 (checkbox), Google reCAPTCHA v3 (score-based), Cloudflare Turnstile, and a self-hosted math CAPTCHA that makes zero external calls. Pick one per website from Settings and switch anytime without reinstalling.

Get the app

Buy it on the Odoo App Store

Purchase, download and install directly from the official Odoo Apps Store — you'll always get the latest supported build.

Signup & Login CAPTCHA Suite — Multi-Provider Bot Protection

Four switchable CAPTCHA providers across signup, login, password reset and website forms, with brute-force lockout, trusted exemptions and an attempt analytics dashboard.

Buy on Odoo App Store