TrustComponent
Angular
TrustCaptcha · Bot protection

Angular CAPTCHA Integration

Add an Angular CAPTCHA to your forms in minutes and block bots and spam on sign-ups, logins and checkouts. Users never see an image puzzle. EU-hosted and GDPR-compliant, with risk scoring and security rules for stronger defense.

Quickstart

How the integration works

1. Create a CAPTCHA

Create a user account or log in with an existing one. Then create a new CAPTCHA or pick an existing one. If you want to try TrustCaptcha first, every plan comes with a 14-day free trial.

The CAPTCHA overview page shows your site key and license key, and you create your API key there. Add your website’s domains to the authorized domains in the CAPTCHA security rules so they can use your CAPTCHA.

Start of the CAPTCHA creation form.
CAPTCHA security rules of a demo CAPTCHA.

2. Integrate the CAPTCHA widget into your frontend

The following steps show roughly how to add the TrustCaptcha widget to an Angular frontend. For the full instructions, read the CAPTCHA integration guide for Angular in our documentation.

Read the documentation

First, install our TrustCaptcha Angular package:

Install
bash
npm i @trustcomponent/trustcaptcha-angular

Then add the CAPTCHA widget, the trustcaptcha-component HTML tag, to any HTML form:

app.component.ts
typescript
import {Component} from '@angular/core';
import {TrustcaptchaComponent} from '@trustcomponent/trustcaptcha-angular';

@Component({
  selector: 'app-root',
  standalone: true,
  imports: [TrustcaptchaComponent],
  template: `
    <form>
      <!-- your input fields -->
      <trustcaptcha-component
        sitekey="<your_site_key>"
        (captchaSolved)="solved($event)"
        (captchaFailed)="failed($event)"
      ></trustcaptcha-component>
      <!-- further input fields / submit button -->
    </form>
  `,
})
export class AppComponent {

  solved(event: Event): void {
    const verificationToken = (event as CustomEvent).detail;
    // handle success
  }

  failed(event: Event): void {
    const errorMessage = (event as CustomEvent).detail;
    // handle error
  }
}

The CAPTCHA widget will now be displayed on your Angular website:

CAPTCHA start

Need detailed information about the Angular CAPTCHA integration?
Our Angular CAPTCHA integration guide has the detailed instructions, and our CAPTCHA samples repository on GitHub has a complete integration example.

Other frontend technology instead of Angular?
If you build with something other than Angular, or run several websites and apps, pick a different framework or platform here. If we have no pre-built integration for your frontend technology yet, your developers can integrate the CAPTCHA themselves using our documentation or ask our support team for a pre-built integration.

Angular
Contact Form 7
Craft CMS
JavaScript
Joomla
JTL-Shop
Keycloak
Magento 2
React
Shopware 6
Svelte
TYPO3
Vue
Webflow
WordPress

3. Validate the CAPTCHA result in your backend

When the CAPTCHA is complete, send the verification token to your backend. There, fetch the verification result from our servers and check it. How you proceed depends on the bot risk. You can find details on backend integration and result validation in our documentation.

Pre-built backend integrations
Our pre-built integrations add the CAPTCHA validation to your backend service. If there is none for your backend technology yet, your developers can integrate the validation themselves using our documentation or ask our support team for a pre-built integration.

.NET
Go
Groovy
Java
Kotlin
Node.js
PHP
Python
Ruby
Rust
Scala

4. Test your integration

TrustCaptcha is now active. Send a test request and check that it goes through.

CAPTCHA done

FAQs

What do I need to set up an Angular CAPTCHA?
You add the TrustCaptcha component to your Angular form and set your site key from the dashboard. Once the check is complete, you receive a verification token that your backend validates.
Which Angular versions are supported?
We recommend Angular 14 or newer. Standalone components are the recommended setup today, but module-based Angular projects also work.
How do I get the verification token in Angular?
You can receive the token via an Angular event (recommended for most Angular apps) or read it from a hidden form field. Event-based handling works especially well with reactive forms and custom submit flows.
Do I still need server-side validation, or is the frontend token enough?
You should always validate on the server. Send the token to your backend and verify it using your API key. This is the step that lets you make a reliable allow/deny decision.
Where should I place the CAPTCHA in longer forms?
Place it close to the final submit step. By default, the verification token is single-use and valid for 15 minutes. On the Enterprise plan you can extend the validity and allow a limited number of retrievals. Solving the CAPTCHA right before submitting avoids issues for users who spend longer on the form.
Does TrustCaptcha work with Angular SSR or pre-rendering?
Yes, but SSR setups may require extra care. If you run into issues, render the CAPTCHA only in the browser (after hydration) and keep the server-rendered output without the widget.
How can we run automated tests (Cypress/Playwright) without solving the CAPTCHA every time?
Use bypass keys (available from the Team plan) in non-production environments to get a valid token quickly. Keep bypass keys out of production builds (use environment settings) and treat them like sensitive credentials.
Losing leads to CAPTCHAs?

TrustCaptcha blocks spam and bots, not customers. No puzzles, GDPR-compliant, EU-hosted.

CAPTCHA start
CAPTCHA done
No puzzles for visitors
The check runs in the background while visitors type, so more people finish your forms instead of giving up.
GDPR-compliant
Hosted in the EU, no cookies, encrypted transmission and automatic data deletion. Every customer gets a Data Processing Agreement.
Multi-layer security
Adaptive proof-of-work and risk scoring stop abuse early, even when attack traffic spikes.
Full control
Set the sensitivity, keep allow and block lists and use geoblocking. You decide how strict the check is.

Protect your Angular application with TrustCaptcha in just a few steps!

  • EU-hosted & GDPR-compliant
  • No puzzles
  • Try free for 14 days