How to Enable Admin Login Captcha in Magento 2?

Enable Admin Login Captcha in Magento 2

Are you looking to enable admin login captcha in Magento 2?

Enabling login captcha strengthens the Magento security. It prevents the login through brute force attack. Last time, we learned to enable captcha for customers. Lets see how to enable login captcha for admins.

What is Admin Login Captcha?

Admin login captcha is the captcha implemented on the Magento admin pages. So when the Magento owners open the login URL, they will find a captcha to solve besides the traditional username-password. Magento comes with the inbuilt admin login captcha which you can enable in a click.

Why Enable Admin Login Captcha?

Enabling admin login captcha is a security measure. We suggest you change your Magento login URL. If not, it would be Like me, a hacker can also see your store URL.

The hackers can use this information to run  a brute force attack. The brute force attack is the hacking attack where the hackers use a large number of username and password combinations to find the right one.

If you have not changed the Magento username, then the username would be the default one – which is admin. You can see, one can try a different password combination with the username admin to find the correct credentials and take over the store.

Adding the login captcha stops this automatic process, as the hackers have to solve the captcha to proceed. It takes time so the hackers ignore your store and move to the next one – an easier one.

How to Enable Admin Login Captcha?

Follow the steps to enable admin login captcha:

  1. Login to the Magento store
  2. Click ‘Stores’ on the Admin Panel.
  1. Select Configuration under the Settings section
Enable Admin Login Captcha
  1. Under Customers, click on Customer Configuration
Enable Admin Login Captcha in Magento 2
  1. Open the Captcha section and enable it
Enable Admin Login Captcha in Magento 2

Enable CAPTCHA on Frontend: Select Yes from the Dropdown Menu.

Font: The font used in the CAPTCHA.

Forms: Select the forms you want the Captcha on.

Displaying Mode: Whether to display the captcha all the time. Or to make it visible once the person gets a certain number of incorrect login attempts.

Number of Unsuccessful Attempts to Login: If you choose to make the captcha visible after X number of incorrect login attempts, specify the number of unsuccessful attempts.

CAPTCHA Timeout (minutes): Number of minutes the captcha expires.

Number of Symbols: Enter the range number of symbols that CAPTCHA will be changed in, for example: 3-7. The maximum number of symbols is eight.

Symbols Used in CAPTCHA: Symbols that should build the Captcha. You can only set letters (a-z and A-Z), or number (0-9) to enter into the box.

Case Sensitive: Whether the captcha should be uppercase and lowercase sensitive or not.

More Magento Tutorials:

Wrap Up

Thanks to Magento, you do not have to install the Magento extensions to add the captcha to your store. You can protect the store from bots, brute force attacks and fraudulent logins. 

I hope this quick tutorial helped you in enabling the admin login captcha in Magento 2. If you encounter any issue, please feel free to leave it in the comment box.

Latest Magento Tips, Guides, & News

Stay updated with new stuff in the Magento ecosystem including exclusive deals, how-to articles, new plugins, and more. 100% Magento Goodness, a promise!

Leave a Comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Scroll to Top

Talk to a sales representative

USA / Worldwide




We can help you. Right now.

Fast growing merchants choose Breeze for high-performance hosting. Experience counts. Let's get started.

Request demo

Please fill in the details below and we’ll reach out to you with a customized demo of our product!


75% OFF on

Receive the coupon as soon as you
submit the email address. 🚀