TrustComponent
Craft CMS
TrustCaptcha · Bot protection

Craft CMS CAPTCHA Plugin

Add a Craft CMS CAPTCHA in minutes. TrustCaptcha protects User Registrations, Contact Form and Formie submissions from bots and spam, without puzzles. EU-hosted and GDPR-compliant.

Quickstart

How the integration works

1. Create a CAPTCHA

Create a user account or log in with an existing one. Then create a new CAPTCHA or pick an existing one. If you want to try TrustCaptcha first, every plan comes with a 14-day free trial.

The CAPTCHA overview page shows your site key and license key, and you create your API key there. Add your website’s domains to the authorized domains in the CAPTCHA security rules so they can use your CAPTCHA.

Start of the CAPTCHA creation form.
CAPTCHA security rules of a demo CAPTCHA.

2. Integrate the CAPTCHA plugin

Install the TrustCaptcha plugin for Craft CMS from the Craft Plugin Store or with Composer. The CAPTCHA integration guide for Craft CMS in our documentation has the detailed instructions.

Read the documentation

To install the plugin with Composer:

Install
bash
composer require trustcaptcha/trustcaptcha-craftcms

You can add TrustCaptcha to any Craft CMS plugin, including your own. Out of the box, our Craft CMS CAPTCHA plugin currently supports these plugins:

  • User Registrations
  • Contact Form
  • Formie

Other frontend technology instead of Craft CMS?
If you build with something other than Craft CMS, or run several websites and apps, pick a different framework or platform here. If we have no pre-built integration for your frontend technology yet, your developers can integrate the CAPTCHA themselves using our documentation or ask our support team for a pre-built integration.

Angular
Contact Form 7
Craft CMS
JavaScript
Joomla
JTL-Shop
Keycloak
Magento 2
React
Shopware 6
Svelte
TYPO3
Vue
Webflow
WordPress

3. Configure the TrustCaptcha plugin

All settings and instructions are in our Craft CMS documentation.

Craft CMS TrustCaptcha general settings

4. Test your integration

TrustCaptcha is now active. Send a test request and check that it goes through.

CAPTCHA done

FAQs

Which Craft CMS versions are supported by the TrustCaptcha plugin?
The TrustCaptcha Craft CMS plugin is compatible with Craft CMS 4 and Craft CMS 5. For the current release, the Composer requirements include Craft ^4.4.0 or ^5, and PHP >= 8.0.2.
What do I need before I set up the Craft CMS CAPTCHA?
You need a TrustCaptcha account and an existing CAPTCHA in your TrustCaptcha dashboard. From there, copy the site key and API key and add them to Craft under Settings → Plugins → TrustCaptcha.
Where do I allow my Craft website domain so the CAPTCHA can be used?
In your TrustCaptcha dashboard, open your CAPTCHA's security rules and add your websites to the list of authorized websites. If a domain is not authorized, the CAPTCHA won't work on that site.
Which Craft plugins are supported out of the box?
The Craft CMS connector supports these plugins out of the box: User Registrations, Contact Form, and Formie.
How do I enable TrustCaptcha for Formie forms?
Install both plugins (TrustCaptcha and Formie). Then go to Settings → Plugins → Formie → Captchas, enable TrustCaptcha and enter your site key and API key. Finally, enable the captcha for each form in the form settings under Integrations.
The CAPTCHA doesn’t show up on my form. What should I check first?
First, make sure the plugin is configured with your site key and API key. If you are integrating manually in Twig, ensure your layout loads scripts (e.g., using "{{ head() }}") and that the TrustCaptcha widget snippet is placed inside the form.
Do I need to change templates or write custom code?
For supported plugins (like Contact Form, User Registrations, and Formie), you can enable TrustCaptcha via settings without editing templates. For other use cases, you can add the widget to your Twig form and validate the result manually using the TrustCaptcha functions provided by the plugin.
Losing leads to CAPTCHAs?

TrustCaptcha blocks spam and bots, not customers. No puzzles, GDPR-compliant, EU-hosted.

CAPTCHA start
CAPTCHA done
No puzzles for visitors
The check runs in the background while visitors type, so more people finish your forms instead of giving up.
GDPR-compliant
Hosted in the EU, no cookies, encrypted transmission and automatic data deletion. Every customer gets a Data Processing Agreement.
Multi-layer security
Adaptive proof-of-work and risk scoring stop abuse early, even when attack traffic spikes.
Full control
Set the sensitivity, keep allow and block lists and use geoblocking. You decide how strict the check is.

Protect your Craft CMS application with TrustCaptcha in just a few steps!

  • EU-hosted & GDPR-compliant
  • No puzzles
  • Try free for 14 days
Get started Contact sales