diff --git a/api/public/index.html b/api/public/index.html
index 32c5813..a92c45d 100644
--- a/api/public/index.html
+++ b/api/public/index.html
@@ -1,5 +1,5 @@
 <!DOCTYPE html>
-<html lang="en">
+<html lang="en" id="html-root">
 <head>
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
@@ -70,7 +70,7 @@ header {
 .header-right {
   display: flex;
   align-items: center;
-  gap: 20px;
+  gap: 16px;
   font-size: 11px;
   color: var(--green2);
   letter-spacing: 1px;
@@ -89,6 +89,19 @@ header {
 
 @keyframes blink { 50% { opacity: 0; } }
 
+/* ── Lang switcher ───────────────────────────────────────────────────── */
+.lang-switcher { display: flex; gap: 4px; align-items: center; }
+.lang-btn {
+  background: none;
+  border: none;
+  cursor: pointer;
+  padding: 1px 2px;
+  line-height: 1;
+  transition: opacity .15s, font-size .15s;
+}
+.lang-btn.active  { font-size: 20px; opacity: 1; }
+.lang-btn.inactive { font-size: 14px; opacity: 0.4; }
+
 /* ── Main ───────────────────────────────────────────────────────────── */
 main { padding: 14px 16px; max-width: 1700px; margin: 0 auto; }
 
@@ -267,10 +280,14 @@ footer {
   color: var(--dim);
   display: flex;
   justify-content: space-between;
+  align-items: center;
   letter-spacing: 1px;
   flex-wrap: wrap;
   gap: 6px;
 }
+footer a { color: var(--dim); text-decoration: none; }
+footer a:hover { color: var(--green2); }
+.footer-eu { display: flex; align-items: center; gap: 6px; }
 
 /* ── Top target banner ──────────────────────────────────────────────── */
 #top-target {
@@ -296,14 +313,8 @@ footer {
   text-shadow: 0 0 10px var(--red);
   letter-spacing: 1px;
 }
-#top-target .tt-hits {
-  font-size: 11px;
-  color: var(--amber);
-}
-#top-target .tt-pct {
-  font-size: 11px;
-  color: var(--dim);
-}
+#top-target .tt-hits { font-size: 11px; color: var(--amber); }
+#top-target .tt-pct  { font-size: 11px; color: var(--dim); }
 
 /* ── Responsive ─────────────────────────────────────────────────────── */
 @media (max-width: 1100px) {
@@ -324,7 +335,12 @@ footer {
   <div class="logo glow">[HONEYPOT<em>]</em> // NETWORK THREAT INTELLIGENCE</div>
   <div class="header-right">
     <span id="clock">--:--:--</span>
-    <span><span class="live-dot"></span>LIVE FEED</span>
+    <span><span class="live-dot"></span><span data-i18n="live_feed">LIVE FEED</span></span>
+    <div class="lang-switcher">
+      <button class="lang-btn" data-lang="en" onclick="setLang('en')" title="English">🇬🇧</button>
+      <button class="lang-btn" data-lang="es" onclick="setLang('es')" title="Español">🇪🇸</button>
+      <button class="lang-btn" data-lang="ro" onclick="setLang('ro')" title="Română">🇷🇴</button>
+    </div>
   </div>
 </header>
 
@@ -334,32 +350,32 @@ footer {
   <div class="stats-row">
     <div class="stat-card">
       <div class="stat-num glow" id="s-total">…</div>
-      <div class="stat-lbl">Total Blocked</div>
+      <div class="stat-lbl" data-i18n="stat_total">TOTAL BLOCKED</div>
     </div>
     <div class="stat-card">
       <div class="stat-num glow" id="s-today">…</div>
-      <div class="stat-lbl">Today</div>
+      <div class="stat-lbl" data-i18n="stat_today">TODAY</div>
     </div>
     <div class="stat-card">
       <div class="stat-num" id="s-7d">…</div>
-      <div class="stat-lbl">Last 7 Days</div>
+      <div class="stat-lbl" data-i18n="stat_7d">LAST 7 DAYS</div>
     </div>
     <div class="stat-card">
       <div class="stat-num" id="s-30d">…</div>
-      <div class="stat-lbl">Last 30 Days</div>
+      <div class="stat-lbl" data-i18n="stat_30d">LAST 30 DAYS</div>
     </div>
     <div class="stat-card">
       <div class="stat-num glow" id="s-sites">…</div>
-      <div class="stat-lbl">Sites Reporting</div>
+      <div class="stat-lbl" data-i18n="stat_sites">SITES REPORTING</div>
     </div>
   </div>
 
   <!-- ── Most attacked form ────────────────────────────────────────── -->
   <div id="top-target">
-    <span class="tt-label">▶ MOST ATTACKED FORM (30D):</span>
+    <span class="tt-label" id="tt-label" data-i18n="top_target_label">▶ MOST ATTACKED FORM (30D):</span>
     <span class="tt-form" id="tt-form">—</span>
     <span class="tt-hits" id="tt-hits"></span>
-    <span class="tt-pct" id="tt-pct"></span>
+    <span class="tt-pct"  id="tt-pct"></span>
   </div>
 
   <!-- ── Content grid ───────────────────────────────────────────────── -->
@@ -370,7 +386,7 @@ footer {
       <!-- 24h chart -->
       <div class="panel">
         <div class="panel-hdr">
-          <span>▶ 24H ACTIVITY TREND</span>
+          <span data-i18n="chart_title">▶ 24H ACTIVITY TREND</span>
           <span id="chart-peak" style="color:var(--dim);font-size:11px"></span>
         </div>
         <div class="panel-body" style="padding:10px 12px">
@@ -380,15 +396,15 @@ footer {
 
       <!-- Bar charts -->
       <div class="panel">
-        <div class="panel-hdr">▶ ATTACK BREAKDOWN // LAST 30 DAYS</div>
+        <div class="panel-hdr" data-i18n="breakdown_title">▶ ATTACK BREAKDOWN // LAST 30 DAYS</div>
         <div class="panel-body">
           <div class="bars-2col">
             <div>
-              <div class="bar-section-title">FORM TYPES</div>
+              <div class="bar-section-title" data-i18n="form_types">FORM TYPES</div>
               <ul class="bar-list" id="bars-forms"></ul>
             </div>
             <div>
-              <div class="bar-section-title">BOT TOOLKIT</div>
+              <div class="bar-section-title" data-i18n="bot_toolkit">BOT TOOLKIT</div>
               <ul class="bar-list" id="bars-ua"></ul>
             </div>
           </div>
@@ -397,7 +413,7 @@ footer {
 
       <!-- Block reasons -->
       <div class="panel">
-        <div class="panel-hdr">▶ BLOCK REASONS // LAST 30 DAYS</div>
+        <div class="panel-hdr" data-i18n="reasons_title">▶ BLOCK REASONS // LAST 30 DAYS</div>
         <div class="panel-body">
           <ul class="bar-list" id="bars-reasons"></ul>
         </div>
@@ -408,13 +424,13 @@ footer {
     <!-- Live feed -->
     <div class="panel feed-panel">
       <div class="panel-hdr">
-        <span>▶ LIVE THREAT FEED</span>
-        <span id="feed-count" style="color:var(--dim);font-size:11px">0 events</span>
+        <span data-i18n="feed_title">▶ LIVE THREAT FEED</span>
+        <span id="feed-count" style="color:var(--dim);font-size:11px">0 <span data-i18n="events">events</span></span>
       </div>
       <div id="feed"></div>
       <div class="feed-footer">
         <span class="cursor"></span>
-        <span id="feed-status" style="color:var(--dim)">connecting…</span>
+        <span id="feed-status" style="color:var(--dim)" data-i18n="connecting">connecting…</span>
       </div>
     </div>
 
@@ -422,19 +438,19 @@ footer {
 
   <!-- ── Top Attackers ──────────────────────────────────────────────── -->
   <div class="panel" style="margin-bottom:10px">
-    <div class="panel-hdr">▶ TOP ATTACKERS // LAST 30 DAYS</div>
+    <div class="panel-hdr" data-i18n="attackers_title">▶ TOP ATTACKERS // LAST 30 DAYS</div>
     <div style="overflow-x:auto">
       <table class="atk-table">
         <thead>
           <tr>
-            <th style="width:50px">RANK</th>
-            <th>IP ADDRESS</th>
-            <th style="width:110px">TOTAL HITS</th>
-            <th>FREQUENCY</th>
+            <th style="width:50px" data-i18n="col_rank">RANK</th>
+            <th data-i18n="col_ip">IP ADDRESS</th>
+            <th style="width:110px" data-i18n="col_hits">TOTAL HITS</th>
+            <th data-i18n="col_freq">FREQUENCY</th>
           </tr>
         </thead>
         <tbody id="atk-body">
-          <tr><td colspan="4" style="text-align:center;padding:20px;color:var(--dim)">Loading…</td></tr>
+          <tr><td colspan="4" style="text-align:center;padding:20px;color:var(--dim)" data-i18n="loading">Loading…</td></tr>
         </tbody>
       </table>
     </div>
@@ -443,11 +459,145 @@ footer {
 </main>
 
 <footer>
-  <span>HONEYPOT NETWORK MONITOR // CENTRALIZED THREAT INTELLIGENCE</span>
-  <span>REFRESHED: <span id="last-update">--</span></span>
+  <span data-i18n="footer_copy">HONEYPOT NETWORK MONITOR // CENTRALIZED THREAT INTELLIGENCE</span>
+  <div class="footer-eu">
+    <span data-i18n="made_in_eu">🇪🇺 Made &amp; hosted in the EU by</span>
+    <a href="https://cloudhost.es" target="_blank" rel="noopener">Cloud Host</a>
+    &nbsp;|&nbsp;
+    <span data-i18n="refreshed">REFRESHED:</span> <span id="last-update">--</span>
+  </div>
 </footer>
 
 <script>
+// ── i18n ──────────────────────────────────────────────────────────────────────
+const I18N = {
+  en: {
+    live_feed:        'LIVE FEED',
+    stat_total:       'TOTAL BLOCKED',
+    stat_today:       'TODAY',
+    stat_7d:          'LAST 7 DAYS',
+    stat_30d:         'LAST 30 DAYS',
+    stat_sites:       'SITES REPORTING',
+    top_target_label: '▶ MOST ATTACKED FORM (30D):',
+    chart_title:      '▶ 24H ACTIVITY TREND',
+    breakdown_title:  '▶ ATTACK BREAKDOWN // LAST 30 DAYS',
+    form_types:       'FORM TYPES',
+    bot_toolkit:      'BOT TOOLKIT',
+    reasons_title:    '▶ BLOCK REASONS // LAST 30 DAYS',
+    feed_title:       '▶ LIVE THREAT FEED',
+    events:           'events',
+    connecting:       'connecting…',
+    connected:        'connected',
+    reconnecting:     'reconnecting…',
+    attackers_title:  '▶ TOP ATTACKERS // LAST 30 DAYS',
+    col_rank:         'RANK',
+    col_ip:           'IP ADDRESS',
+    col_hits:         'TOTAL HITS',
+    col_freq:         'FREQUENCY',
+    loading:          'Loading…',
+    no_data:          'No data yet',
+    footer_copy:      'HONEYPOT NETWORK MONITOR // CENTRALIZED THREAT INTELLIGENCE',
+    refreshed:        'REFRESHED:',
+    made_in_eu:       '🇪🇺 Made & hosted in the EU by',
+  },
+  es: {
+    live_feed:        'EN VIVO',
+    stat_total:       'TOTAL BLOQUEADOS',
+    stat_today:       'HOY',
+    stat_7d:          'ÚLTIMOS 7 DÍAS',
+    stat_30d:         'ÚLTIMOS 30 DÍAS',
+    stat_sites:       'SITIOS REPORTANDO',
+    top_target_label: '▶ FORMULARIO MÁS ATACADO (30D):',
+    chart_title:      '▶ TENDENCIA DE ACTIVIDAD 24H',
+    breakdown_title:  '▶ DESGLOSE DE ATAQUES // ÚLTIMOS 30 DÍAS',
+    form_types:       'TIPOS DE FORMULARIO',
+    bot_toolkit:      'HERRAMIENTAS BOT',
+    reasons_title:    '▶ MOTIVOS DE BLOQUEO // ÚLTIMOS 30 DÍAS',
+    feed_title:       '▶ FEED DE AMENAZAS EN VIVO',
+    events:           'eventos',
+    connecting:       'conectando…',
+    connected:        'conectado',
+    reconnecting:     'reconectando…',
+    attackers_title:  '▶ TOP ATACANTES // ÚLTIMOS 30 DÍAS',
+    col_rank:         'RANGO',
+    col_ip:           'DIRECCIÓN IP',
+    col_hits:         'TOTAL IMPACTOS',
+    col_freq:         'FRECUENCIA',
+    loading:          'Cargando…',
+    no_data:          'Sin datos aún',
+    footer_copy:      'MONITOR DE RED HONEYPOT // INTELIGENCIA CENTRALIZADA DE AMENAZAS',
+    refreshed:        'ACTUALIZADO:',
+    made_in_eu:       '🇪🇺 Hecho y alojado en la UE por',
+  },
+  ro: {
+    live_feed:        'LIVE',
+    stat_total:       'TOTAL BLOCATE',
+    stat_today:       'AZI',
+    stat_7d:          'ULTIMELE 7 ZILE',
+    stat_30d:         'ULTIMELE 30 ZILE',
+    stat_sites:       'SITE-URI RAPORTÂND',
+    top_target_label: '▶ FORMULARUL CEL MAI ATACAT (30Z):',
+    chart_title:      '▶ TENDINȚĂ ACTIVITATE 24H',
+    breakdown_title:  '▶ ANALIZA ATACURILOR // ULTIMELE 30 ZILE',
+    form_types:       'TIPURI FORMULAR',
+    bot_toolkit:      'INSTRUMENTE BOT',
+    reasons_title:    '▶ MOTIVE BLOCARE // ULTIMELE 30 ZILE',
+    feed_title:       '▶ FLUX LIVE AMENINȚĂRI',
+    events:           'evenimente',
+    connecting:       'conectare…',
+    connected:        'conectat',
+    reconnecting:     'reconectare…',
+    attackers_title:  '▶ TOP ATACATORI // ULTIMELE 30 ZILE',
+    col_rank:         'RANG',
+    col_ip:           'ADRESĂ IP',
+    col_hits:         'TOTAL ACCESĂRI',
+    col_freq:         'FRECVENȚĂ',
+    loading:          'Se încarcă…',
+    no_data:          'Fără date încă',
+    footer_copy:      'MONITOR REȚEA HONEYPOT // INFORMAȚII CENTRALIZATE DESPRE AMENINȚĂRI',
+    refreshed:        'ACTUALIZAT:',
+    made_in_eu:       '🇪🇺 Realizat și găzduit în UE de',
+  },
+};
+
+function detectLang() {
+  const saved = localStorage.getItem('hp_lang');
+  if (saved && I18N[saved]) return saved;
+  const nav = (navigator.language || 'en').slice(0, 2).toLowerCase();
+  return I18N[nav] ? nav : 'en';
+}
+
+let currentLang = detectLang();
+
+function t(key) {
+  return (I18N[currentLang] || I18N.en)[key] || (I18N.en[key] || key);
+}
+
+function setLang(lang) {
+  if (!I18N[lang]) return;
+  currentLang = lang;
+  localStorage.setItem('hp_lang', lang);
+  document.getElementById('html-root').lang = lang;
+  applyTranslations();
+  updateLangButtons();
+}
+
+function applyTranslations() {
+  document.querySelectorAll('[data-i18n]').forEach(el => {
+    const key = el.getAttribute('data-i18n');
+    // Don't overwrite elements that also have dynamic child content
+    if (el.children.length === 0) el.textContent = t(key);
+  });
+  document.title = t('chart_title').replace('▶ ', '').split('//')[0].trim() + ' // NETWORK MONITOR';
+}
+
+function updateLangButtons() {
+  document.querySelectorAll('.lang-btn').forEach(btn => {
+    const active = btn.dataset.lang === currentLang;
+    btn.className = 'lang-btn ' + (active ? 'active' : 'inactive');
+  });
+}
+
 // ── Clock ─────────────────────────────────────────────────────────────────────
 const clockEl = document.getElementById('clock');
 function tick() {
@@ -475,7 +625,7 @@ function countUp(el, to) {
 // ── Bar charts ────────────────────────────────────────────────────────────────
 function renderBars(listEl, items) {
   if (!items || !items.length) {
-    listEl.innerHTML = '<li style="color:var(--dim);font-size:11px;padding:4px 0">No data yet</li>';
+    listEl.innerHTML = `<li style="color:var(--dim);font-size:11px;padding:4px 0">${t('no_data')}</li>`;
     return;
   }
   const max = items[0].hits;
@@ -505,7 +655,7 @@ function drawChart(hourly) {
   if (!hourly || !hourly.length) {
     ctx.fillStyle = '#005500';
     ctx.font = '12px Courier New';
-    ctx.fillText('No activity in last 24h', 10, 44);
+    ctx.fillText(t('no_data'), 10, 44);
     return;
   }
 
@@ -555,7 +705,7 @@ window.addEventListener('resize', () => { if (window._hourly) drawChart(window._
 function renderAttackers(ips) {
   const tbody = document.getElementById('atk-body');
   if (!ips || !ips.length) {
-    tbody.innerHTML = '<tr><td colspan="4" style="text-align:center;padding:20px;color:var(--dim)">No data yet</td></tr>';
+    tbody.innerHTML = `<tr><td colspan="4" style="text-align:center;padding:20px;color:var(--dim)">${t('no_data')}</td></tr>`;
     return;
   }
   const max = ips[0].hits;
@@ -579,7 +729,7 @@ function fmtTime(ts) {
 // ── Live feed ─────────────────────────────────────────────────────────────────
 let feedCount   = 0;
 let autoScroll  = true;
-const feedEl    = document.getElementById('feed');
+const feedEl     = document.getElementById('feed');
 const feedCount$ = document.getElementById('feed-count');
 const feedStatus = document.getElementById('feed-status');
 
@@ -588,7 +738,7 @@ feedEl.addEventListener('mouseleave', () => { autoScroll = true; });
 
 function addRow(row) {
   feedCount++;
-  feedCount$.textContent = `${feedCount.toLocaleString()} events`;
+  feedCount$.textContent = `${feedCount.toLocaleString()} ${t('events')}`;
   const el = document.createElement('div');
   el.className = 'feed-row';
   el.innerHTML = `
@@ -614,13 +764,13 @@ async function seedFeed() {
 // SSE for live updates
 function connectSSE() {
   const es = new EventSource('/api/v1/stream');
-  es.onopen    = () => { feedStatus.textContent = 'connected'; };
+  es.onopen    = () => { feedStatus.textContent = t('connected'); };
   es.onmessage = e => {
     try { JSON.parse(e.data).reverse().forEach(addRow); } catch {}
   };
   es.onerror = () => {
     es.close();
-    feedStatus.textContent = 'reconnecting…';
+    feedStatus.textContent = t('reconnecting');
     setTimeout(connectSSE, 5000);
   };
 }
@@ -646,10 +796,11 @@ async function fetchStats() {
     // Top attacked form banner
     if (s.top_forms && s.top_forms.length) {
       const top = s.top_forms[0];
-      document.getElementById('tt-form').textContent = top.form_type;
-      document.getElementById('tt-hits').textContent = `${top.hits.toLocaleString()} hits`;
+      document.getElementById('tt-label').textContent = t('top_target_label');
+      document.getElementById('tt-form').textContent  = top.form_type;
+      document.getElementById('tt-hits').textContent  = `${top.hits.toLocaleString()} hits`;
       const pct = s.last_30d > 0 ? Math.round(top.hits / s.last_30d * 100) : 0;
-      document.getElementById('tt-pct').textContent  = `(${pct}% of all blocks)`;
+      document.getElementById('tt-pct').textContent   = `(${pct}% of all blocks)`;
     }
 
     window._hourly = s.hourly;
@@ -661,6 +812,9 @@ async function fetchStats() {
 }
 
 // ── Boot ──────────────────────────────────────────────────────────────────────
+feedStatus.textContent = t('connecting');
+applyTranslations();
+updateLangButtons();
 seedFeed();
 connectSSE();
 fetchStats();
diff --git a/honeypot-fields.php b/honeypot-fields.php
index efe0874..30c94d8 100644
--- a/honeypot-fields.php
+++ b/honeypot-fields.php
@@ -3,7 +3,7 @@
  * Plugin Name: Honeypot Fields
  * Plugin URI: https://informatiq.services
  * Description: Adds invisible honeypot fields to all forms to block spam bots. Works with WordPress core forms, Elementor, Gravity Forms, Contact Form 7, WooCommerce, and more.
- * Version: 2.2.0
+ * Version: 2.3.0
  * Author: Malin
  * Author URI: https://malin.ro
  * License: GPL v2 or later
@@ -184,8 +184,9 @@ class SmartHoneypotAPIClient {
 
         $base    = trailingslashit(esc_url_raw($s['api_url']));
         $headers = ['Content-Type' => 'application/json'];
-        if (!empty($s['api_token'])) {
-            $headers['Authorization'] = 'Bearer ' . $s['api_token'];
+        $token   = self::resolve_token();
+        if ($token !== '') {
+            $headers['Authorization'] = 'Bearer ' . $token;
         }
 
         // Step 1 — reachability
@@ -256,8 +257,9 @@ class SmartHoneypotAPIClient {
         ], $rows);
 
         $headers = ['Content-Type' => 'application/json'];
-        if (!empty($s['api_token'])) {
-            $headers['Authorization'] = 'Bearer ' . $s['api_token'];
+        $token   = self::resolve_token();
+        if ($token !== '') {
+            $headers['Authorization'] = 'Bearer ' . $token;
         }
 
         $response = wp_remote_post(
@@ -329,8 +331,9 @@ class SmartHoneypotAPIClient {
         $site_hash = hash('sha256', home_url());
 
         $headers = ['Content-Type' => 'application/json'];
-        if (!empty($s['api_token'])) {
-            $headers['Authorization'] = 'Bearer ' . $s['api_token'];
+        $token   = self::resolve_token();
+        if ($token !== '') {
+            $headers['Authorization'] = 'Bearer ' . $token;
         }
 
         $response = wp_remote_post(
@@ -358,6 +361,292 @@ class SmartHoneypotAPIClient {
     public static function queue_size(): int {
         return count((array) get_option(self::OPT_QUEUE, []));
     }
+
+    /**
+     * Returns the API token.
+     * Checks the HP_API_TOKEN constant (defined in wp-config.php) first,
+     * then falls back to the value stored in the database.
+     */
+    private static function resolve_token(): string {
+        if (defined('HP_API_TOKEN') && HP_API_TOKEN !== '') {
+            return (string) HP_API_TOKEN;
+        }
+        return self::settings()['api_token'] ?? '';
+    }
+}
+
+/* ======================================================================
+ *  INTERNATIONALISATION
+ * ====================================================================*/
+class SmartHoneypotI18n {
+
+    const USER_META = 'hp_lang';
+
+    // phpcs:disable Generic.Files.LineLength
+    const STRINGS = [
+        'en' => [
+            'tab_logs'          => 'Blocked Logs',
+            'tab_api'           => 'Central API',
+            'cleared'           => 'Logs cleared.',
+            'saved'             => 'API settings saved.',
+            'flushed'           => 'Queue flushed to central API.',
+            'history_reset_msg' => 'History sync progress has been reset. You can re-send from the beginning.',
+            'click_next'        => 'Click "Send Next Batch" to continue.',
+            'total_blocked'     => 'Total Blocked',
+            'today'             => 'Today',
+            'unique_ips'        => 'Unique IPs',
+            'form_types_hit'    => 'Form Types Hit',
+            'search_ph'         => 'Search IP, UA, reason…',
+            'filter_ip_ph'      => 'Filter by IP',
+            'all_forms'         => 'All form types',
+            'filter_btn'        => 'Filter',
+            'reset_btn'         => 'Reset',
+            'clear_logs'        => 'Clear All Logs',
+            'clear_confirm'     => 'Delete ALL log entries permanently?',
+            'col_date'          => 'Date / Time',
+            'col_ip'            => 'IP Address',
+            'col_form'          => 'Form Type',
+            'col_reason'        => 'Reason',
+            'col_uri'           => 'URI',
+            'col_ua'            => 'User Agent',
+            'no_results'        => 'No blocked attempts recorded yet.',
+            'filter_link'       => 'filter',
+            'lookup_link'       => 'lookup ↗',
+            'prev'              => '← Prev',
+            'next'              => 'Next →',
+            'showing'           => 'Showing',
+            'results'           => 'result(s)',
+            'page_of'           => 'page %d of %d',
+            'settings_title'    => 'Central API Settings',
+            'settings_desc'     => 'Submit blocked attempts to a central dashboard for aggregate threat intelligence. Data sent: full IP address, form type, block reason, UA family, and timestamp. No site URL or usernames are ever sent.',
+            'enable_label'      => 'Enable Submission',
+            'enable_cb'         => 'Send blocked attempts to the central API',
+            'url_label'         => 'API Endpoint URL',
+            'url_desc'          => 'Base URL of your Honeypot API Docker container.',
+            'token_label'       => 'API Token',
+            'token_desc'        => 'Must match the <code>API_TOKEN</code> set in your Docker container\'s environment. Leave empty only if the API runs without a token (not recommended).',
+            'token_const_note'  => 'Token is set via the <code>HP_API_TOKEN</code> constant in <code>wp-config.php</code>.',
+            'save_settings'     => 'Save Settings',
+            'conn_status'       => 'Connection Status',
+            'conn_label'        => 'Connection',
+            'conn_ok'           => 'Verified — connected and token accepted',
+            'conn_fail'         => 'Connection failed',
+            'conn_untested'     => 'Not tested yet',
+            'last_verified'     => 'Last Verified',
+            'enabled_lbl'       => 'Enabled',
+            'yes'               => 'Yes',
+            'no'                => 'No',
+            'last_sync'         => 'Last Sync',
+            'never'             => 'Never',
+            'total_sent'        => 'Total Sent',
+            'blocks_unit'       => 'blocks',
+            'queue_size'        => 'Queue Size',
+            'pending_unit'      => 'pending',
+            'next_flush'        => 'Next Auto-Flush',
+            'not_scheduled'     => 'Not scheduled',
+            'test_conn'         => 'Test Connection',
+            'flush_queue'       => 'Flush Queue Now',
+            'history_title'     => 'Send History to API',
+            'history_desc'      => 'Populate the central dashboard with your existing log so charts and stats are meaningful right away, without waiting for new attacks. Records are sent in batches of 50.',
+            'local_log'         => 'Local Log',
+            'local_log_val'     => '%s records in this site\'s database',
+            'sent_api'          => 'Sent to API',
+            'remaining_lbl'     => 'Remaining',
+            'remaining_val'     => '%s records not yet sent',
+            'send_history'      => 'Send History',
+            'send_next'         => 'Send Next Batch',
+            'all_sent'          => '✓ All history sent',
+            'reset_progress'    => 'Reset Progress',
+        ],
+        'es' => [
+            'tab_logs'          => 'Registros Bloqueados',
+            'tab_api'           => 'API Central',
+            'cleared'           => 'Registros eliminados.',
+            'saved'             => 'Configuración de API guardada.',
+            'flushed'           => 'Cola enviada a la API central.',
+            'history_reset_msg' => 'El progreso de sincronización se ha restablecido. Puedes reenviar desde el principio.',
+            'click_next'        => 'Haz clic en "Enviar Siguiente Lote" para continuar.',
+            'total_blocked'     => 'Total Bloqueados',
+            'today'             => 'Hoy',
+            'unique_ips'        => 'IPs Únicas',
+            'form_types_hit'    => 'Tipos de Formulario',
+            'search_ph'         => 'Buscar IP, UA, razón…',
+            'filter_ip_ph'      => 'Filtrar por IP',
+            'all_forms'         => 'Todos los tipos',
+            'filter_btn'        => 'Filtrar',
+            'reset_btn'         => 'Reiniciar',
+            'clear_logs'        => 'Borrar Todos los Registros',
+            'clear_confirm'     => '¿Eliminar TODOS los registros permanentemente?',
+            'col_date'          => 'Fecha / Hora',
+            'col_ip'            => 'Dirección IP',
+            'col_form'          => 'Tipo de Formulario',
+            'col_reason'        => 'Razón',
+            'col_uri'           => 'URI',
+            'col_ua'            => 'User Agent',
+            'no_results'        => 'No hay intentos bloqueados aún.',
+            'filter_link'       => 'filtrar',
+            'lookup_link'       => 'consultar ↗',
+            'prev'              => '← Anterior',
+            'next'              => 'Siguiente →',
+            'showing'           => 'Mostrando',
+            'results'           => 'resultado(s)',
+            'page_of'           => 'página %d de %d',
+            'settings_title'    => 'Configuración de la API Central',
+            'settings_desc'     => 'Envía intentos bloqueados a un panel central de inteligencia de amenazas. Se envía: IP completa, tipo de formulario, razón de bloqueo, familia de UA y marca de tiempo. Nunca se envían URLs del sitio ni nombres de usuario.',
+            'enable_label'      => 'Activar Envío',
+            'enable_cb'         => 'Enviar intentos bloqueados a la API central',
+            'url_label'         => 'URL del Endpoint de la API',
+            'url_desc'          => 'URL base del contenedor Docker de la API Honeypot.',
+            'token_label'       => 'Token de la API',
+            'token_desc'        => 'Debe coincidir con <code>API_TOKEN</code> en el entorno del contenedor Docker.',
+            'token_const_note'  => 'El token está definido mediante la constante <code>HP_API_TOKEN</code> en <code>wp-config.php</code>.',
+            'save_settings'     => 'Guardar Configuración',
+            'conn_status'       => 'Estado de la Conexión',
+            'conn_label'        => 'Conexión',
+            'conn_ok'           => 'Verificada — conectada y token aceptado',
+            'conn_fail'         => 'Error de conexión',
+            'conn_untested'     => 'No probada todavía',
+            'last_verified'     => 'Última Verificación',
+            'enabled_lbl'       => 'Activado',
+            'yes'               => 'Sí',
+            'no'                => 'No',
+            'last_sync'         => 'Última Sincronización',
+            'never'             => 'Nunca',
+            'total_sent'        => 'Total Enviados',
+            'blocks_unit'       => 'bloqueos',
+            'queue_size'        => 'Tamaño de Cola',
+            'pending_unit'      => 'pendientes',
+            'next_flush'        => 'Próximo Envío Automático',
+            'not_scheduled'     => 'No programado',
+            'test_conn'         => 'Probar Conexión',
+            'flush_queue'       => 'Enviar Cola Ahora',
+            'history_title'     => 'Enviar Historial a la API',
+            'history_desc'      => 'Rellena el panel central con tu registro existente para que las estadísticas sean significativas de inmediato, sin esperar nuevos ataques. Los registros se envían en lotes de 50.',
+            'local_log'         => 'Registro Local',
+            'local_log_val'     => '%s registros en la base de datos de este sitio',
+            'sent_api'          => 'Enviados a la API',
+            'remaining_lbl'     => 'Restantes',
+            'remaining_val'     => '%s registros aún no enviados',
+            'send_history'      => 'Enviar Historial',
+            'send_next'         => 'Enviar Siguiente Lote',
+            'all_sent'          => '✓ Todo el historial enviado',
+            'reset_progress'    => 'Reiniciar Progreso',
+        ],
+        'ro' => [
+            'tab_logs'          => 'Jurnale Blocate',
+            'tab_api'           => 'API Central',
+            'cleared'           => 'Jurnale șterse.',
+            'saved'             => 'Setări API salvate.',
+            'flushed'           => 'Coada trimisă la API-ul central.',
+            'history_reset_msg' => 'Progresul sincronizării a fost resetat. Poți retrimite de la început.',
+            'click_next'        => 'Apasă „Trimite Lotul Următor" pentru a continua.',
+            'total_blocked'     => 'Total Blocate',
+            'today'             => 'Azi',
+            'unique_ips'        => 'IP-uri Unice',
+            'form_types_hit'    => 'Tipuri de Formulare Atacate',
+            'search_ph'         => 'Caută IP, UA, motiv…',
+            'filter_ip_ph'      => 'Filtrează după IP',
+            'all_forms'         => 'Toate tipurile',
+            'filter_btn'        => 'Filtrează',
+            'reset_btn'         => 'Resetează',
+            'clear_logs'        => 'Șterge Toate Jurnalele',
+            'clear_confirm'     => 'Ștergi TOATE înregistrările permanent?',
+            'col_date'          => 'Dată / Oră',
+            'col_ip'            => 'Adresă IP',
+            'col_form'          => 'Tip Formular',
+            'col_reason'        => 'Motiv',
+            'col_uri'           => 'URI',
+            'col_ua'            => 'User Agent',
+            'no_results'        => 'Nu există tentative blocate încă.',
+            'filter_link'       => 'filtrează',
+            'lookup_link'       => 'caută ↗',
+            'prev'              => '← Anterior',
+            'next'              => 'Următor →',
+            'showing'           => 'Afișând',
+            'results'           => 'rezultat(e)',
+            'page_of'           => 'pagina %d din %d',
+            'settings_title'    => 'Setări API Central',
+            'settings_desc'     => 'Trimite tentativele blocate la un panou central de informații despre amenințări. Date trimise: IP complet, tip formular, motiv blocare, familie UA și marcă temporală. Nu se trimit niciodată URL-ul site-ului sau nume de utilizatori.',
+            'enable_label'      => 'Activează Trimiterea',
+            'enable_cb'         => 'Trimite tentativele blocate la API-ul central',
+            'url_label'         => 'URL Endpoint API',
+            'url_desc'          => 'URL-ul de bază al containerului Docker API Honeypot.',
+            'token_label'       => 'Token API',
+            'token_desc'        => 'Trebuie să coincidă cu <code>API_TOKEN</code> din mediul containerului Docker.',
+            'token_const_note'  => 'Tokenul este setat prin constanta <code>HP_API_TOKEN</code> în <code>wp-config.php</code>.',
+            'save_settings'     => 'Salvează Setările',
+            'conn_status'       => 'Status Conexiune',
+            'conn_label'        => 'Conexiune',
+            'conn_ok'           => 'Verificată — conectată și token acceptat',
+            'conn_fail'         => 'Conexiune eșuată',
+            'conn_untested'     => 'Netestată încă',
+            'last_verified'     => 'Ultima Verificare',
+            'enabled_lbl'       => 'Activat',
+            'yes'               => 'Da',
+            'no'                => 'Nu',
+            'last_sync'         => 'Ultima Sincronizare',
+            'never'             => 'Niciodată',
+            'total_sent'        => 'Total Trimise',
+            'blocks_unit'       => 'blocări',
+            'queue_size'        => 'Dimensiune Coadă',
+            'pending_unit'      => 'în așteptare',
+            'next_flush'        => 'Următoarea Trimitere Automată',
+            'not_scheduled'     => 'Neprogramată',
+            'test_conn'         => 'Testează Conexiunea',
+            'flush_queue'       => 'Trimite Coada Acum',
+            'history_title'     => 'Trimite Istoricul la API',
+            'history_desc'      => 'Populează panoul central cu jurnalul existent pentru ca statisticile să fie relevante imediat, fără a aștepta noi atacuri. Înregistrările se trimit în loturi de 50.',
+            'local_log'         => 'Jurnal Local',
+            'local_log_val'     => '%s înregistrări în baza de date a acestui site',
+            'sent_api'          => 'Trimise la API',
+            'remaining_lbl'     => 'Rămase',
+            'remaining_val'     => '%s înregistrări netrimise',
+            'send_history'      => 'Trimite Istoricul',
+            'send_next'         => 'Trimite Lotul Următor',
+            'all_sent'          => '✓ Tot istoricul a fost trimis',
+            'reset_progress'    => 'Resetează Progresul',
+        ],
+    ];
+    // phpcs:enable
+
+    public static function get_lang(): string {
+        $user_id = get_current_user_id();
+        $lang    = $user_id ? (string) get_user_meta($user_id, self::USER_META, true) : '';
+        return in_array($lang, ['en', 'es', 'ro'], true) ? $lang : 'en';
+    }
+
+    public static function t(string $key): string {
+        $lang    = self::get_lang();
+        $strings = self::STRINGS[$lang] ?? self::STRINGS['en'];
+        return $strings[$key] ?? (self::STRINGS['en'][$key] ?? $key);
+    }
+
+    public static function flag_switcher(): string {
+        $lang  = self::get_lang();
+        $nonce = wp_nonce_field('hp_admin_action', '_wpnonce', true, false);
+        $tab   = sanitize_key($_GET['tab'] ?? 'logs');
+        $html  = '<div style="display:inline-flex;gap:4px;align-items:center">';
+        foreach (['en' => '🇬🇧', 'es' => '🇪🇸', 'ro' => '🇷🇴'] as $code => $flag) {
+            $style = $lang === $code
+                ? 'background:none;border:none;cursor:pointer;padding:2px;font-size:22px;opacity:1'
+                : 'background:none;border:none;cursor:pointer;padding:2px;font-size:16px;opacity:0.45';
+            $html .= sprintf(
+                '<form method="post" style="margin:0">%s'
+                . '<input type="hidden" name="tab" value="%s">'
+                . '<input type="hidden" name="hp_action" value="set_language">'
+                . '<input type="hidden" name="hp_lang" value="%s">'
+                . '<button type="submit" title="%s" style="%s">%s</button></form>',
+                $nonce,
+                esc_attr($tab),
+                esc_attr($code),
+                esc_attr(strtoupper($code)),
+                esc_attr($style),
+                $flag
+            );
+        }
+        $html .= '</div>';
+        return $html;
+    }
 }
 
 /* ======================================================================
@@ -441,7 +730,7 @@ class SmartHoneypotAdmin {
         if ($_POST['hp_action'] === 'save_api_settings') {
             $current    = SmartHoneypotAPIClient::settings();
             $new_url    = esc_url_raw(trim($_POST['hp_api_url']    ?? ''));
-            $new_token  = sanitize_text_field($_POST['hp_api_token'] ?? '');
+            $new_token  = defined('HP_API_TOKEN') ? $current['api_token'] : sanitize_text_field($_POST['hp_api_token'] ?? '');
             $url_changed = $new_url   !== $current['api_url'];
             $tok_changed = $new_token !== $current['api_token'];
 
@@ -492,6 +781,16 @@ class SmartHoneypotAdmin {
             wp_redirect(add_query_arg(['page' => self::MENU_SLUG, 'tab' => 'settings', 'history_reset' => 1], admin_url('admin.php')));
             exit;
         }
+
+        if ($_POST['hp_action'] === 'set_language') {
+            $lang = sanitize_key($_POST['hp_lang'] ?? 'en');
+            if (in_array($lang, ['en', 'es', 'ro'], true)) {
+                update_user_meta(get_current_user_id(), SmartHoneypotI18n::USER_META, $lang);
+            }
+            $tab = sanitize_key($_GET['tab'] ?? 'logs');
+            wp_redirect(add_query_arg(['page' => self::MENU_SLUG, 'tab' => $tab], admin_url('admin.php')));
+            exit;
+        }
     }
 
     public static function render_page() {
@@ -503,15 +802,16 @@ class SmartHoneypotAdmin {
         ?>
         <div class="wrap" id="hp-wrap">
             <h1 class="wp-heading-inline">Honeypot Fields</h1>
+            <span style="margin-left:14px;vertical-align:middle"><?= SmartHoneypotI18n::flag_switcher() ?></span>
 
             <?php if (!empty($_GET['cleared'])): ?>
-                <div class="notice notice-success is-dismissible"><p>Logs cleared.</p></div>
+                <div class="notice notice-success is-dismissible"><p><?= SmartHoneypotI18n::t('cleared') ?></p></div>
             <?php endif; ?>
             <?php if (!empty($_GET['saved'])): ?>
-                <div class="notice notice-success is-dismissible"><p>API settings saved.</p></div>
+                <div class="notice notice-success is-dismissible"><p><?= SmartHoneypotI18n::t('saved') ?></p></div>
             <?php endif; ?>
             <?php if (!empty($_GET['flushed'])): ?>
-                <div class="notice notice-success is-dismissible"><p>Queue flushed to central API.</p></div>
+                <div class="notice notice-success is-dismissible"><p><?= SmartHoneypotI18n::t('flushed') ?></p></div>
             <?php endif; ?>
             <?php if (!empty($_GET['tested'])):
                 $res = get_transient('hp_conn_result');
@@ -527,24 +827,24 @@ class SmartHoneypotAdmin {
                     <div class="notice <?= $cls ?> is-dismissible">
                         <p><?= esc_html($res['message']) ?>
                         <?php if (!empty($res['has_more'])): ?>
-                            &nbsp;<strong>Click "Send Next Batch" to continue.</strong>
+                            &nbsp;<strong><?= SmartHoneypotI18n::t('click_next') ?></strong>
                         <?php endif; ?>
                         </p>
                     </div>
                 <?php endif;
             endif; ?>
             <?php if (!empty($_GET['history_reset'])): ?>
-                <div class="notice notice-info is-dismissible"><p>History sync progress has been reset. You can re-send from the beginning.</p></div>
+                <div class="notice notice-info is-dismissible"><p><?= SmartHoneypotI18n::t('history_reset_msg') ?></p></div>
             <?php endif; ?>
 
             <nav class="nav-tab-wrapper hp-tabs">
                 <a href="<?= esc_url(admin_url('admin.php?page=' . self::MENU_SLUG . '&tab=logs')) ?>"
                    class="nav-tab <?= $tab === 'logs' ? 'nav-tab-active' : '' ?>">
-                    Blocked Logs
+                    <?= SmartHoneypotI18n::t('tab_logs') ?>
                 </a>
                 <a href="<?= esc_url(admin_url('admin.php?page=' . self::MENU_SLUG . '&tab=settings')) ?>"
                    class="nav-tab <?= $tab === 'settings' ? 'nav-tab-active' : '' ?>">
-                    Central API
+                    <?= SmartHoneypotI18n::t('tab_api') ?>
                 </a>
             </nav>
 
@@ -560,6 +860,7 @@ class SmartHoneypotAdmin {
 
     /* ── Logs tab ─────────────────────────────────────────────────── */
     private static function render_logs_tab() {
+        $T           = fn(string $k): string => SmartHoneypotI18n::t($k);
         $search      = sanitize_text_field($_GET['hp_search'] ?? '');
         $filter_ip   = sanitize_text_field($_GET['hp_ip']     ?? '');
         $filter_form = sanitize_text_field($_GET['hp_form']   ?? '');
@@ -586,10 +887,10 @@ class SmartHoneypotAdmin {
         ?>
         <!-- Stats -->
         <div class="hp-stats">
-            <div class="hp-stat-card"><div class="hp-stat-num"><?= number_format($total_ever) ?></div><div class="hp-stat-lbl">Total Blocked</div></div>
-            <div class="hp-stat-card"><div class="hp-stat-num"><?= number_format($today) ?></div><div class="hp-stat-lbl">Today</div></div>
-            <div class="hp-stat-card"><div class="hp-stat-num"><?= number_format($unique_ips) ?></div><div class="hp-stat-lbl">Unique IPs</div></div>
-            <div class="hp-stat-card"><div class="hp-stat-num"><?= count($form_types) ?></div><div class="hp-stat-lbl">Form Types Hit</div></div>
+            <div class="hp-stat-card"><div class="hp-stat-num"><?= number_format($total_ever) ?></div><div class="hp-stat-lbl"><?= $T('total_blocked') ?></div></div>
+            <div class="hp-stat-card"><div class="hp-stat-num"><?= number_format($today) ?></div><div class="hp-stat-lbl"><?= $T('today') ?></div></div>
+            <div class="hp-stat-card"><div class="hp-stat-num"><?= number_format($unique_ips) ?></div><div class="hp-stat-lbl"><?= $T('unique_ips') ?></div></div>
+            <div class="hp-stat-card"><div class="hp-stat-num"><?= count($form_types) ?></div><div class="hp-stat-lbl"><?= $T('form_types_hit') ?></div></div>
         </div>
 
         <!-- Filters + clear -->
@@ -597,44 +898,44 @@ class SmartHoneypotAdmin {
             <input type="hidden" name="page" value="<?= esc_attr(self::MENU_SLUG) ?>">
             <input type="hidden" name="tab"  value="logs">
             <div class="hp-filters">
-                <input type="text" name="hp_search" placeholder="Search IP, UA, reason…" value="<?= esc_attr($search) ?>" size="28">
-                <input type="text" name="hp_ip" placeholder="Filter by IP" value="<?= esc_attr($filter_ip) ?>">
+                <input type="text" name="hp_search" placeholder="<?= esc_attr($T('search_ph')) ?>" value="<?= esc_attr($search) ?>" size="28">
+                <input type="text" name="hp_ip" placeholder="<?= esc_attr($T('filter_ip_ph')) ?>" value="<?= esc_attr($filter_ip) ?>">
                 <select name="hp_form">
-                    <option value="">All form types</option>
+                    <option value=""><?= $T('all_forms') ?></option>
                     <?php foreach ($form_types as $ft): ?>
                         <option value="<?= esc_attr($ft) ?>" <?= selected($filter_form, $ft, false) ?>><?= esc_html($ft) ?></option>
                     <?php endforeach; ?>
                 </select>
-                <button type="submit" class="button">Filter</button>
+                <button type="submit" class="button"><?= $T('filter_btn') ?></button>
                 <?php if ($search || $filter_ip || $filter_form): ?>
-                    <a href="<?= esc_url($base) ?>" class="button">Reset</a>
+                    <a href="<?= esc_url($base) ?>" class="button"><?= $T('reset_btn') ?></a>
                 <?php endif; ?>
                 <span style="flex:1"></span>
-                <form method="post" style="display:inline" onsubmit="return confirm('Delete ALL log entries permanently?')">
+                <form method="post" style="display:inline" onsubmit="return confirm('<?= esc_js($T('clear_confirm')) ?>')">
                     <?php wp_nonce_field(self::NONCE_ACTION); ?>
                     <input type="hidden" name="hp_action" value="clear_logs">
-                    <button type="submit" class="button hp-red">Clear All Logs</button>
+                    <button type="submit" class="button hp-red"><?= $T('clear_logs') ?></button>
                 </form>
             </div>
         </form>
 
-        <p>Showing <strong><?= number_format($total) ?></strong> result<?= $total !== 1 ? 's' : '' ?> (page <?= $paged ?> of <?= $total_pages ?>)</p>
+        <p><?= $T('showing') ?> <strong><?= number_format($total) ?></strong> <?= $T('results') ?> (<?= sprintf($T('page_of'), $paged, $total_pages) ?>)</p>
 
         <table class="hp-log widefat">
             <thead>
-                <tr><th>#</th><th>Date / Time</th><th>IP Address</th><th>Form Type</th><th>Reason</th><th>URI</th><th>User Agent</th></tr>
+                <tr><th>#</th><th><?= $T('col_date') ?></th><th><?= $T('col_ip') ?></th><th><?= $T('col_form') ?></th><th><?= $T('col_reason') ?></th><th><?= $T('col_uri') ?></th><th><?= $T('col_ua') ?></th></tr>
             </thead>
             <tbody>
             <?php if (empty($rows)): ?>
-                <tr><td colspan="7" style="text-align:center;padding:24px;color:#646970">No blocked attempts recorded yet.</td></tr>
+                <tr><td colspan="7" style="text-align:center;padding:24px;color:#646970"><?= $T('no_results') ?></td></tr>
             <?php else: foreach ($rows as $row): ?>
                 <tr>
                     <td><?= esc_html($row->id) ?></td>
                     <td style="white-space:nowrap"><?= esc_html($row->blocked_at) ?></td>
                     <td>
                         <code><?= esc_html($row->ip_address) ?></code><br>
-                        <a href="<?= esc_url(add_query_arg(['page' => self::MENU_SLUG, 'tab' => 'logs', 'hp_ip' => $row->ip_address], admin_url('admin.php'))) ?>" style="font-size:11px">filter</a>
-                        &nbsp;<a href="https://ipinfo.io/<?= esc_attr(urlencode($row->ip_address)) ?>" target="_blank" style="font-size:11px">lookup ↗</a>
+                        <a href="<?= esc_url(add_query_arg(['page' => self::MENU_SLUG, 'tab' => 'logs', 'hp_ip' => $row->ip_address], admin_url('admin.php'))) ?>" style="font-size:11px"><?= $T('filter_link') ?></a>
+                        &nbsp;<a href="https://ipinfo.io/<?= esc_attr(urlencode($row->ip_address)) ?>" target="_blank" style="font-size:11px"><?= $T('lookup_link') ?></a>
                     </td>
                     <td><span class="hp-badge"><?= esc_html($row->form_type) ?></span></td>
                     <td><?= esc_html($row->reason) ?></td>
@@ -648,7 +949,7 @@ class SmartHoneypotAdmin {
         <?php if ($total_pages > 1): ?>
         <div class="hp-pager">
             <?php if ($paged > 1): ?>
-                <a href="<?= esc_url(add_query_arg(array_merge($_GET, ['paged' => $paged - 1]))) ?>">← Prev</a>
+                <a href="<?= esc_url(add_query_arg(array_merge($_GET, ['paged' => $paged - 1]))) ?>"><?= $T('prev') ?></a>
             <?php endif; ?>
             <?php for ($p = max(1, $paged-3); $p <= min($total_pages, $paged+3); $p++):
                 $url = esc_url(add_query_arg(array_merge($_GET, ['paged' => $p]))); ?>
@@ -659,7 +960,7 @@ class SmartHoneypotAdmin {
                 <?php endif; ?>
             <?php endfor; ?>
             <?php if ($paged < $total_pages): ?>
-                <a href="<?= esc_url(add_query_arg(array_merge($_GET, ['paged' => $paged + 1]))) ?>">Next →</a>
+                <a href="<?= esc_url(add_query_arg(array_merge($_GET, ['paged' => $paged + 1]))) ?>"><?= $T('next') ?></a>
             <?php endif; ?>
         </div>
         <?php endif; ?>
@@ -668,16 +969,15 @@ class SmartHoneypotAdmin {
 
     /* ── Settings / API tab ───────────────────────────────────────── */
     private static function render_settings_tab() {
-        $s          = SmartHoneypotAPIClient::settings();
-        $queue_size = SmartHoneypotAPIClient::queue_size();
-        $next_run   = wp_next_scheduled('hp_api_flush');
+        $T               = fn(string $k): string => SmartHoneypotI18n::t($k);
+        $s               = SmartHoneypotAPIClient::settings();
+        $queue_size      = SmartHoneypotAPIClient::queue_size();
+        $next_run        = wp_next_scheduled('hp_api_flush');
+        $token_via_const = defined('HP_API_TOKEN') && HP_API_TOKEN !== '';
         ?>
         <div style="max-width:700px;margin-top:20px">
-            <h2>Central API Settings</h2>
-            <p style="color:#646970;margin-bottom:16px">
-                Submit blocked attempts to a central dashboard for aggregate threat intelligence.
-                Data sent: full IP address, form type, block reason, UA family, and timestamp. No site URL or usernames are ever sent.
-            </p>
+            <h2><?= $T('settings_title') ?></h2>
+            <p style="color:#646970;margin-bottom:16px"><?= $T('settings_desc') ?></p>
 
             <form method="post">
                 <?php wp_nonce_field(self::NONCE_ACTION); ?>
@@ -685,61 +985,62 @@ class SmartHoneypotAdmin {
 
                 <table class="form-table">
                     <tr>
-                        <th>Enable Submission</th>
+                        <th><?= $T('enable_label') ?></th>
                         <td>
                             <label>
                                 <input type="checkbox" name="hp_api_enabled" value="1" <?= checked($s['enabled']) ?>>
-                                Send blocked attempts to the central API
+                                <?= $T('enable_cb') ?>
                             </label>
                         </td>
                     </tr>
                     <tr>
-                        <th>API Endpoint URL</th>
+                        <th><?= $T('url_label') ?></th>
                         <td>
                             <input type="url" name="hp_api_url" value="<?= esc_attr($s['api_url']) ?>"
                                    class="regular-text" placeholder="https://your-api-host:3000">
-                            <p class="description">Base URL of your Honeypot API Docker container.</p>
+                            <p class="description"><?= $T('url_desc') ?></p>
                         </td>
                     </tr>
                     <tr>
-                        <th>API Token</th>
+                        <th><?= $T('token_label') ?></th>
                         <td>
-                            <input type="password" name="hp_api_token" value="<?= esc_attr($s['api_token']) ?>"
-                                   class="regular-text" placeholder="Bearer token (matches API_TOKEN in docker-compose)">
-                            <p class="description">
-                                Must match the <code>API_TOKEN</code> set in your Docker container's environment.
-                                Leave empty only if the API is running without a token (not recommended).
-                            </p>
+                            <?php if ($token_via_const): ?>
+                                <input type="text" class="regular-text" value="••••••••••••" disabled>
+                                <p class="description"><?= $T('token_const_note') ?></p>
+                            <?php else: ?>
+                                <input type="password" name="hp_api_token" value="<?= esc_attr($s['api_token']) ?>"
+                                       class="regular-text" placeholder="Bearer token (matches API_TOKEN in docker-compose)">
+                                <p class="description"><?= $T('token_desc') ?></p>
+                            <?php endif; ?>
                         </td>
                     </tr>
                 </table>
 
-                <?php submit_button('Save Settings'); ?>
+                <?php submit_button($T('save_settings')); ?>
             </form>
 
             <hr>
 
-            <h3>Connection Status</h3>
+            <h3><?= $T('conn_status') ?></h3>
             <?php
-            // Resolve dot state: null=untested, true=verified, false=failed
             $conn = $s['connection_ok'];
             if ($conn === true) {
-                $dot_class  = 'dot-on';
-                $dot_label  = 'Verified — connected and token accepted';
-                $dot_style  = '';
+                $dot_class = 'dot-on';
+                $dot_label = $T('conn_ok');
+                $dot_style = '';
             } elseif ($conn === false) {
-                $dot_class  = 'dot-fail';
-                $dot_label  = 'Connection failed';
-                $dot_style  = 'background:#b32d2e;';
+                $dot_class = 'dot-fail';
+                $dot_label = $T('conn_fail');
+                $dot_style = 'background:#b32d2e;';
             } else {
-                $dot_class  = 'dot-off';
-                $dot_label  = 'Not tested yet';
-                $dot_style  = '';
+                $dot_class = 'dot-off';
+                $dot_label = $T('conn_untested');
+                $dot_style = '';
             }
             ?>
             <table class="form-table">
                 <tr>
-                    <th>Connection</th>
+                    <th><?= $T('conn_label') ?></th>
                     <td>
                         <span class="hp-api-status">
                             <span class="dot <?= $dot_class ?>" style="<?= $dot_style ?>"></span>
@@ -751,13 +1052,13 @@ class SmartHoneypotAdmin {
                     </td>
                 </tr>
                 <?php if ($s['last_verified']): ?>
-                <tr><th>Last Verified</th><td><?= esc_html(date('Y-m-d H:i:s', $s['last_verified'])) ?></td></tr>
+                <tr><th><?= $T('last_verified') ?></th><td><?= esc_html(date('Y-m-d H:i:s', $s['last_verified'])) ?></td></tr>
                 <?php endif; ?>
-                <tr><th>Enabled</th><td><?= $s['enabled'] ? 'Yes' : 'No' ?></td></tr>
-                <tr><th>Last Sync</th><td><?= $s['last_sync'] ? esc_html(date('Y-m-d H:i:s', $s['last_sync'])) : 'Never' ?></td></tr>
-                <tr><th>Total Sent</th><td><?= number_format((int) $s['sent_total']) ?> blocks</td></tr>
-                <tr><th>Queue Size</th><td><?= number_format($queue_size) ?> pending</td></tr>
-                <tr><th>Next Auto-Flush</th><td><?= $next_run ? esc_html(date('Y-m-d H:i:s', $next_run)) . ' (every 5 min)' : 'Not scheduled' ?></td></tr>
+                <tr><th><?= $T('enabled_lbl') ?></th><td><?= $s['enabled'] ? $T('yes') : $T('no') ?></td></tr>
+                <tr><th><?= $T('last_sync') ?></th><td><?= $s['last_sync'] ? esc_html(date('Y-m-d H:i:s', $s['last_sync'])) : $T('never') ?></td></tr>
+                <tr><th><?= $T('total_sent') ?></th><td><?= number_format((int) $s['sent_total']) ?> <?= $T('blocks_unit') ?></td></tr>
+                <tr><th><?= $T('queue_size') ?></th><td><?= number_format($queue_size) ?> <?= $T('pending_unit') ?></td></tr>
+                <tr><th><?= $T('next_flush') ?></th><td><?= $next_run ? esc_html(date('Y-m-d H:i:s', $next_run)) . ' (every 5 min)' : $T('not_scheduled') ?></td></tr>
             </table>
 
             <div style="display:flex;gap:10px;margin-top:14px;flex-wrap:wrap;align-items:center">
@@ -765,25 +1066,22 @@ class SmartHoneypotAdmin {
                 <form method="post">
                     <?php wp_nonce_field(self::NONCE_ACTION); ?>
                     <input type="hidden" name="hp_action" value="test_connection">
-                    <button type="submit" class="button button-primary">Test Connection</button>
+                    <button type="submit" class="button button-primary"><?= $T('test_conn') ?></button>
                 </form>
                 <?php endif; ?>
                 <?php if ($queue_size > 0 && $s['enabled'] && $s['api_url']): ?>
                 <form method="post">
                     <?php wp_nonce_field(self::NONCE_ACTION); ?>
                     <input type="hidden" name="hp_action" value="flush_queue">
-                    <button type="submit" class="button button-secondary">Flush Queue Now (<?= $queue_size ?> pending)</button>
+                    <button type="submit" class="button button-secondary"><?= $T('flush_queue') ?> (<?= $queue_size ?> <?= $T('pending_unit') ?>)</button>
                 </form>
                 <?php endif; ?>
             </div>
 
             <?php if ($s['api_url'] && $s['enabled']): ?>
             <hr>
-            <h3>Send History to API</h3>
-            <p style="color:#646970;margin-bottom:12px">
-                Populate the central dashboard with your existing log so the charts and stats are meaningful right away,
-                without waiting for new attacks. Records are sent in batches of 50.
-            </p>
+            <h3><?= $T('history_title') ?></h3>
+            <p style="color:#646970;margin-bottom:12px"><?= $T('history_desc') ?></p>
             <?php
             $local_total  = SmartHoneypotDB::count();
             $history_sent = (int) get_option('hp_history_total_sent', 0);
@@ -792,13 +1090,13 @@ class SmartHoneypotAdmin {
             ?>
             <table class="form-table">
                 <tr>
-                    <th>Local Log</th>
-                    <td><?= number_format($local_total) ?> records in this site's database</td>
+                    <th><?= $T('local_log') ?></th>
+                    <td><?= sprintf($T('local_log_val'), number_format($local_total)) ?></td>
                 </tr>
                 <tr>
-                    <th>Sent to API</th>
+                    <th><?= $T('sent_api') ?></th>
                     <td>
-                        <?= number_format($history_sent) ?> records (<?= $pct ?>%)
+                        <?= number_format($history_sent) ?> (<?= $pct ?>%)
                         <?php if ($local_total > 0): ?>
                         <div style="margin-top:6px;background:#f0f0f1;border-radius:3px;height:8px;max-width:300px">
                             <div style="background:#2271b1;height:100%;border-radius:3px;width:<?= $pct ?>%;transition:width .4s"></div>
@@ -807,8 +1105,8 @@ class SmartHoneypotAdmin {
                     </td>
                 </tr>
                 <tr>
-                    <th>Remaining</th>
-                    <td><?= number_format($remaining) ?> records not yet sent</td>
+                    <th><?= $T('remaining_lbl') ?></th>
+                    <td><?= sprintf($T('remaining_val'), number_format($remaining)) ?></td>
                 </tr>
             </table>
 
@@ -818,18 +1116,18 @@ class SmartHoneypotAdmin {
                     <?php wp_nonce_field(self::NONCE_ACTION); ?>
                     <input type="hidden" name="hp_action" value="send_history">
                     <button type="submit" class="button button-secondary">
-                        <?= $history_sent === 0 ? 'Send History' : 'Send Next Batch' ?>
-                        (<?= min(50, $remaining) ?> of <?= number_format($remaining) ?> remaining)
+                        <?= $history_sent === 0 ? $T('send_history') : $T('send_next') ?>
+                        (<?= min(50, $remaining) ?> of <?= number_format($remaining) ?> <?= $T('pending_unit') ?>)
                     </button>
                 </form>
                 <?php else: ?>
-                    <span style="color:#00a32a;font-weight:600">✓ All history sent</span>
+                    <span style="color:#00a32a;font-weight:600"><?= $T('all_sent') ?></span>
                 <?php endif; ?>
                 <?php if ($history_sent > 0): ?>
                 <form method="post" onsubmit="return confirm('Reset history sync progress? This allows re-sending all records from the beginning.')">
                     <?php wp_nonce_field(self::NONCE_ACTION); ?>
                     <input type="hidden" name="hp_action" value="reset_history">
-                    <button type="submit" class="button">Reset Progress</button>
+                    <button type="submit" class="button"><?= $T('reset_progress') ?></button>
                 </form>
                 <?php endif; ?>
             </div>
