Stop Spammers Classic

FAQ

I’m locked out of my admin!

You’ll need to access your site files (most likely via FTP), navigate to /wp-content/plugins, and rename the /stop-spammer-registrations-plugin folder by adding a “1” to the beginning. Once you’re back in your admin, remove the “1” from the folder name and make sure to add yourself to the Allow List.

Can I use Stop Spammers with Cloudflare?

Yes. But, you may need to restore visitor IPs.

Can I use Stop Spammers with Wordfence (and other spam and security plugins)?

Yes. The two can compliment each other. However, if you have only a small amount of hosting resources (mainly memory) or aren’t even allowing registration on your website, using both might be overkill.

Can I use Stop Spammers with WooCommerce (and other ecommerce plugins)?

Yes. But, in some configurations, you may need to go to Stop Spammers > Protection Options > Toggle on the option for “Only Use the Plugin for Standard WordPress Forms” > Save if you’re running into any issues.

Can I use Stop Spammers with Akismet?

Yes. Stop Spammers can even check Akismet for an extra layer of protection.

Can I use Stop Spammers with Jetpack?

Yes and no. You can use all Jetpack features except for Jetpack Protect, as it conflicts with Stop Spammers.

Why is 2FA failing?

Under Protection Options, toggle off the “Check Credentials on All Login Attempts” option and try again.

Is Stop Spammers GDPR-compliant?

Yes. Under most circumstances. Stop Spammers itself does not attempt to collect any PII, and collects only the minimum data needed for anti-spam control. However, enabling third-party protections introduces new data collection on external servers that could break GDPR. See the next FAQ.

What third-party services are used and what data is sent to them?

There are several optional services you may use that involve sending data to third parties including: Google reCAPTCHA, hCaptcha, 2Captcha, Spamhaus, Stop Forum Spam, Project Honeypot, and BotScout. You may wish to read each services’ privacy policy to see if you’re comfortable using them, but generally speaking, whenever someone for example tries to use a contact form on your website, their IP address, name, and email may be sent to these services to check against spam blocklists.