Form Security

Shopify Password Reset CAPTCHA Protection Check

Shopify password reset pages can be abused by bots. Check that a CAPTCHA is in place to protect this process.

What this test checks

This test checks whether your Shopify password reset page is protected by a CAPTCHA. Without it, attackers can automate reset requests to harass your customers, saturate your email system, or attempt account takeover by exploiting weaknesses in the reset process.

Our recommendation

Protect your Shopify password reset page with a CAPTCHA via a Shopify app. Use a request‑limiting mechanism (e.g., 3 attempts per hour). Ensure reset emails contain a secure link with a short validity period.

Security tests

View all tests

CMS Security

Shopify Password Reset CAPTCHA Protection Check

What this test checks

Our recommendation

Read more

Magento Admin Login Page Protection Check

robots.txt File Check

CAPTCHA Presence on Admin Page Check

WordPress REST API Access Check

Shopify X-Content-Type-Options Header Check

WordPress Theme Editor Access Check

Malicious File Presence Check in Upload Folders

Shopify Contact Form CAPTCHA Protection Check

Magento Version Check

PrestaShop Log File Exposure Check

CORS Configuration Check (Access-Control-Allow-Origin)

CNIL Mention in Privacy Policy Check

Shopify CSRF Protection Check

PrestaShop Upload Folder Indexing Check

Installation Log File Exposure Check

Shopify Content-Security-Policy Header Check

Shopify Storefront API Exposure Check

Shopify Upload Folder Security Check

Shopify X-Frame-Options Header Check

PHP Error Display on Joomla Check

Cookie Consent Banner Presence Check

Shopify Environment Information Exposure Check

Magento Backup File Exposure Check

Shopify HTTP Security Headers Check

CAPTCHA Presence on Password Reset Form Check

Shopify API Key Exposure Check

Configuration File Exposure Check

Joomla Administrator Interface Access Check

Shopify SQL Injection Protection Check

Joomla Version Check

Magento Admin Access Restriction Check

PrestaShop parameters.php File Access Check

Shopify Backup File Exposure Check

Drupal Temporary Folder (tmp/) Access Check

PrestaShop Session Cookie Security Check

WordPress Login Page Access Check (wp-login.php)

WordPress Admin Access Check

CAPTCHA Presence on Client Login Page Check

Email Address Exposure Check

Drupal Admin Login Page Protection Check

WordPress Heartbeat API Check

Cross-Origin-Resource-Policy Header Check

X-Frame-Options Header Check

Shopify Sensitive File Exposure Check

CAPTCHA Presence on Contact Form Check

.htaccess File Presence and Security Check

Server Configuration Information Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Content-Security-Policy Header Check

Shopify File Upload Security Check

Permissions-Policy Header Check

Shopify Error Display Check

Clear-Site-Data Header Check

Shopify HSTS Header Check

Upload Folder Protection Check (.htaccess, index.html files)

PrestaShop Version Check

wp-config.php File Access Check

CMS Vulnerability Check

Database Administration Tools Access Check

SQL Query Exposure Check

Development File Exposure Check

Cross-Origin-Embedder-Policy Header Check

Shopify Registration CAPTCHA Protection Check

Access to wp-cron.php Check

Joomla REST API Access Check

Magento env.php File Access Check

API Key Exposure Check

Shopify HTTPS Redirect Check

PHP Error Display on WordPress Check

Drupal settings.php File Access Check

Shopify REST API Exposure Check

Magento Session Cookie Security Check

Upload Folder Indexing Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

HttpOnly Flag on Joomla Session Cookies Check

Shopify Permissions-Policy Header Check