Registration Guard
Account Registration Guard for WordPress
by Paul Faulkner · github.com/headwalluk/registration-guard · website
Install
The author publishes release zips, so WP-CLI can install straight from GitHub:
wp plugin install https://github.com/headwalluk/registration-guard/releases/download/v1.0.0/registration-guard.zipReadme
Registration Guard
Lightweight bot registration protection for WordPress and WooCommerce. Three layered defences with zero configuration required.
What It Does
Registration Guard blocks automated bot account creation using three independent layers:
-
JavaScript Nonce Challenge -- Registration forms require a time-delayed nonce fetched via AJAX. Bots that POST directly to the registration handler without loading the page are blocked.
-
Email Double Opt-In -- New registrations must verify their email address via a tokenised link. Unverified accounts are automatically deleted after a configurable window (default: 24 hours).
-
Geo-Restriction -- Limit registration to allowed countries or block specific countries. Uses WooCommerce geolocation (requires WooCommerce).
Each layer works independently. Disable any layer you don't need.
Quick Start
- Upload the
registration-guardfolder to/wp-content/plugins/ - Activate through the WordPress admin
- Configure at Settings > Registration Guard (optional -- sensible defaults are set on activation)
All three defences are enabled by default (geo-restriction requires WooCommerce).
Documentation
| Guide | Audience |
|---|---|
| Getting Started | Everyone |
| WooCommerce Store Guide | Store administrators |
| Hosting & Server Notes | System administrators, hosting providers |
| Building an Integration | Integration developers |
| Providing Geo-IP Data | Hosting providers, plugin developers |
| Contributing | Developers |
Requirements
- WordPress 6.0 or higher
- PHP 8.0 or higher
- Working email delivery (
wp_mail) - WooCommerce (optional -- required only for geo-restriction)
License
GPL v2 or later. See LICENSE file.
Read the full README on GitHub →