TrustCaptcha – Bot protection

CraftCMS CAPTCHA Plugin

Add TrustCaptcha to Craft CMS in minutes. Protect User Registrations, Contact Form and Formie submissions from bots and spam—without puzzles. EU-hosted and GDPR-ready with privacy-first processing.

Quickstart

How the integration works

1. Create a CAPTCHA

Create a user account or log in with an existing one. Then create a new CAPTCHA or select an existing one. If you’re unsure whether TrustCaptcha is right for you, try our CAPTCHA service risk-free for 14 days at no cost.

On the CAPTCHA overview page, you will find all the important information, such as the site key, secret key and licence key. Allow your websites to access your CAPTCHA by simply adding them to the access authorised domain list in the CAPTCHA security rules.

CAPTCHA security rules of a demo CAPTCHA.

2. Integrate the CAPTCHA Plugin

Install the TrustCaptcha CraftCMS plugin via the Craft Plugin Store or using composer. For precise, detailed instructions, please read the CAPTCHA integration guide for CraftCMS in our documentation.

Read the documentation

If you want to install the TrustCaptcha plugin via Composer:

Install

bash

composer require trustcaptcha/trustcaptcha-craftcms

You can integrate TrustCaptcha in any CraftCMS plugin or in your own ones. Our pre-built CAPTCHA for CraftCMS currently supports the following CraftCMS plugins out-of-the-box:

User Registrations
Contact Form
Formie

Other frontend technology instead of CraftCMS?
If you do not want to use CraftCMS or have several websites or applications, you can select a different framework or platform here. If there is no pre-built integration from us for your preferred frontend technology, your software developers can integrate the CAPTCHA themselves using our documentation or ask our support-team for a pre-built integration solution.

3. Configure the TrustCaptcha Plugin

You can find all the important information and instructions in our CraftCMS documentation.

4. Congratulations 🎉

You are now protected by TrustCaptcha - congratulations!

FAQs

Which Craft CMS versions are supported by the TrustCaptcha plugin?

The TrustCaptcha CraftCMS plugin is compatible with Craft CMS 4 and Craft CMS 5. For the current release, the Composer requirements include Craft ^4.4.0 or ^5, and PHP >= 8.0.2.

What do I need before I start (keys, account, setup)?

You need a TrustCaptcha account and an existing CAPTCHA in your TrustCaptcha dashboard. From there, copy the site-key and secret-key and add them to Craft under Settings → Plugins → TrustCaptcha.

Where do I allow my Craft website domain so the CAPTCHA can be used?

In your TrustCaptcha dashboard, open your CAPTCHA’s security rules and add your website(s) to the list of authorized websites. If a domain is not authorized, the CAPTCHA won’t work on that site.

Which Craft plugins are supported out of the box?

The CraftCMS connector supports these plugins out of the box: User Registrations, Contact Form, and Formie.

How do I enable TrustCaptcha for Formie forms?

Install both plugins (TrustCaptcha and Formie). Then go to Settings → Plugins → Formie → Captchas, enable TrustCaptcha and enter your site-key and secret-key. Finally, enable the captcha for each form in the form settings under Integrations.

The CAPTCHA doesn’t show up on my form — what should I check first?

First, make sure the plugin is configured with your site-key and secret-key. If you are integrating manually in Twig, ensure your layout loads scripts (e.g., using "{{ head() }}") and that the TrustCaptcha widget snippet is placed inside the form.

Do I need to change templates or write custom code?

For supported plugins (like Contact Form, User Registrations, and Formie), you can enable TrustCaptcha via settings without editing templates. For other use cases, you can add the widget to your Twig form and validate the result manually using the TrustCaptcha functions provided by the plugin.

Losing leads to CAPTCHAs?

TrustCaptcha blocks spam and bots, not customers. No puzzles, GDPR-ready, EU-hosted.

Puzzle-free UX

Runs in the background while visitors type — so more people finish your forms and fewer drop off.

GDPR-ready

EU-hosted and privacy-first: no cookies, encrypted transmission, automatic cleanup — with ready-to-use legal resources.

Multi-layer Security

Adaptive protection plus intelligent risk scoring stops abuse early — even when attack traffic spikes.

Full Control

Fine-tune sensitivity, set allow/block lists, and use geoblocking — you decide how strict verification should be.

Protect your CraftCMS application with TrustCaptcha in just a few steps!

EU-hosted & GDPR-ready
No puzzles
Try free for 14 days

Get started Contact sales