Looking for a way to cut down on WordPress spam registrations?
If your WordPress site is set to allow user registration (like a membership site or WooCommerce store), then it’s probably vulnerable to user registration spam from spam-bots. Finding a way to eliminate, or at least reduce, WordPress spam registrations is important so that you can focus your efforts and resources on your real users.
No matter what type of site you’re running, there are some tried-and-true tactics that you can apply to stop spam registrations in their tracks, and they’re all available in one single plugin.
Below, we’ll show you step-by-step how to stop spam users using the Profile Builder plugin.
How Profile Builder helps you stop WordPress spam registrations
The Profile Builder WordPress plugin is a complete solution for WordPress registration and user profiles. In addition to helping you block spammers, it can also help you:
- Create a custom SEO-friendly registration page, along with the option to add extra fields to the registration form.
- Let users edit their profiles from the front-end of your site.
- Restrict access to your content.
As part of its focus on optimizing the WordPress registration process, Profile Builder Pro includes a number of features to stop WordPress spam registrations and spam signups.
Profile Builder works with any WordPress theme and also integrates with other plugins like WooCommerce and BuddyPress to stop spam registrations there, too.
Of course, it’s a spammy world out there and you still might have to deal with spam comments and contact form submissions, but an anti-spam plugin can help with that type of spam protection 🙂
Here’s how to stop WordPress spam registrations with Profile Builder Pro in just four steps…
How to stop WordPress spam registrations in four steps
1. Add a reCAPTCHA field to your registration form
One of the most popular ways to fight spam is to use a reCAPTCHA verification in your registration process.
Profile Builder Pro has Extra Fields Types and one of them is the reCAPTCHA field, which adds the new No CAPTCHA reCAPTCHA on all Profile Builder front-end forms, as well as default WordPress register, login and lost password forms.
The great thing about No CAPTCHA reCAPTCHA is that it doesn’t bother legitimate users. Users will only see the CAPTCHA if Google thinks they might be spamming, like having an IP address associated with spam. Even if users see the CAPTCHA, usually all they need to do is click a checkbox.
All you need to do is to get a site and a secret key from Google: www.google.com/recaptcha, add them in the reCAPTCHA field and you’re all set. A reCAPTCHA verification will be added automatically to the front-end user registration forms.
If you would like to read more about adding reCAPTCHA to WordPress Register, Login and Lost Password Forms with Profile Builder view this article.
However, in some cases, reCAPTCHA alone doesn’t get rid of user registration spam completely. That’s why we didn’t stop here.
2. Set up custom redirects to use a custom registration URL
Custom Redirects is probably one of the most efficient ways to stop WordPress spam registrations. The Custom Redirects add-on allows you to redirect any request from the default WordPress pages to a custom register page created via Profile Builder.
Custom Redirects will give you the option to redirect users from the Default WP Register Page, Default WP Login Page (wp-login.php), Default WP Lost Password Page, Author Archive Page or even the Default WP Dashboard to custom pages created with Profile Builder, that can’t be targeted by bots. This way you won’t be using the standard WP registration URLs at all.
As a side note, if you want to take things even further, you can disable WordPress registration altogether and have Profile Builder registration still working. This is done with a specific filter we added to the plugin wppb_register_setting_override, which you can use to activate the registration process using the Profile Builder shortcode, and still have the default WordPress registration page deactivated. This way you’ll make it impossible for spam-bots to track your registration pages URLs.
3. Require email confirmation for new user accounts
If someone makes it this far, there’s a good chance they’re not a spam bot. But that doesn’t guarantee it’s still not new user spam.
To further restrict WordPress spam registrations, you can require new user registrations to confirm their email address before they can move on to the actual registration process.
To activate the Email Confirmation feature, you can go to Profile Builder -> General Settings:
This is a perfect way to make sure that only valid email addresses pass the registration process. Users with unconfirmed email addresses will be placed under a “Users with Unconfirmed Email Address” tab in the All Users window. From here you’ll be able to easily remove them or confirm their emails yourself.
4. Require admin approval for new WordPress registrations
Admin Approval is another feature that will keep your user list clean. It makes sure not to create the WordPress user account until you have approved that specific user.
After you activate this feature, you’ll notice an “Admin Approval” tab in the All Users listing. There you can easily approve or delete newly signed up users.
You can also only require admin approval for a specific user role (or roles).
In case you decide to use both Admin Approval and Email Confirmation the built-in Email Customizer will give you the ability to edit and customize the emails sent to the users upon registration or after receiving admin approval.
For more on this, check out our complete guide to WordPress new user approvals.
Stop WordPress spam registrations today
If you implement the four steps above, you’ll have a locked down registration process that stops WordPress spam registrations with minimal interruptions to your legitimate users.
You’ll still be able to set it up so that anyone can register at your site, but you’ll be able to stop spammers from gumming up the works of your WordPress website with spam user registrations.
To start implementing user spam prevention today, purchase Profile Builder Pro by clicking the button below: