TrustCaptcha · Bot protection

JTL-Shop CAPTCHA Plugin

Protect contact, newsletter signup, account creation and checkout forms from bots and spam with our native JTL-Shop CAPTCHA plugin. EU-hosted, with no cookies and no puzzles.

Quickstart

How the integration works

1. Create a CAPTCHA

Create a user account or log in with an existing one. Then create a new CAPTCHA or pick an existing one. If you want to try TrustCaptcha first, every plan comes with a 14-day free trial.

The CAPTCHA overview page shows your site key and license key, and you create your API key there. Add your website’s domains to the authorized domains in the CAPTCHA security rules so they can use your CAPTCHA.

CAPTCHA security rules of a demo CAPTCHA.

2. Integrate the CAPTCHA plugin

Install the JTL-Shop TrustCaptcha plugin by uploading our JTL CAPTCHA plugin as a ZIP file in your JTL-Shop admin area (Plug-ins → Plug-in manager → Upload). After the upload, refresh the page and install the plugin from Plug-ins → Plug-in manager → Available. For step-by-step instructions, read the CAPTCHA integration guide for JTL-Shop in our documentation.

Read the documentation

TrustCaptcha works as a native JTL-Shop spam protection provider. JTL decides when TrustCaptcha is required and therefore displayed. Currently, the plugin supports these areas:

Availability requests
Contact us
Create customer account
Forgot password
Newsletter
Order completion
Order without registration
Question about item

Different platform instead of JTL-Shop?
If you build with something other than JTL-Shop, or run several websites and apps, pick a different framework or platform here. If we have no pre-built integration for your frontend technology yet, your developers can integrate the CAPTCHA themselves using our documentation or ask our support team for a pre-built integration.

3. Configure the TrustCaptcha plugin

Log in as an admin and go to Plug-ins → Installed plug-ins → TrustCaptcha. Enter your site key, API key (formerly secret key) and, if needed, the license key. Then adjust settings like language, theme, and the bot-score threshold.

Finally, enable TrustCaptcha where you need it: in the admin area, search for “spam protection” and set “Enable spam protection” to “Yes” for the areas you want to protect. You can find more details in our JTL-Shop documentation.

4. Test your integration

TrustCaptcha is now active. Send a test request and check that it goes through.

FAQs

Which JTL-Shop versions are supported?

The TrustCaptcha plugin supports JTL-Shop 5. For special setups, see the documentation to confirm compatibility.

What does the JTL-Shop CAPTCHA plugin do?

It connects TrustCaptcha with JTL-Shop’s native spam protection, so bots are blocked while real customers can submit forms without image puzzles.

Which JTL-Shop areas can I protect?

Protect availability requests, contact forms, account creation, password reset, newsletter signup, "question about item", and checkout steps like guest checkout and order completion.

Does it replace JTL’s CAPTCHA or add another widget?

It works as a native spam-protection provider. JTL decides when TrustCaptcha is required and shows it only when needed.

How do I set it up?

Install the plugin ZIP, enter your site key, API key and license key, then enable "spam protection" for the areas you want to secure.

What is bot score and what threshold should I start with?

The bot score (from the Solo plan) ranges from 0 (human) to 1 (bot). Start with the default threshold 0.5, then adjust higher for fewer blocks or lower for stricter protection.

Can I customize design and language?

Yes. Choose a light or dark theme or follow the system setting, let the language be detected automatically, and use options like autostart. Custom designs are available from the Team plan. A widget without our branding or a fully invisible widget is the paid Captcha Branding add-on.

Do I need cookie consent for TrustCaptcha?

TrustCaptcha sets no cookies, processes data exclusively in the EU and comes with a Data Processing Agreement for every customer. Whether your shop needs consent for it depends on your setup, which we cannot assess for you. This is not legal advice; clear the consent question with your data protection officer.

Losing leads to CAPTCHAs?

TrustCaptcha blocks spam and bots, not customers. No puzzles, GDPR-compliant, EU-hosted.

No puzzles for visitors

The check runs in the background while visitors type, so more people finish your forms instead of giving up.

GDPR-compliant

Hosted in the EU, no cookies, encrypted transmission and automatic data deletion. Every customer gets a Data Processing Agreement.

Multi-layer security

Adaptive proof-of-work and risk scoring stop abuse early, even when attack traffic spikes.

Full control

Set the sensitivity, keep allow and block lists and use geoblocking. You decide how strict the check is.

Protect your JTL-Shop application with TrustCaptcha in just a few steps!

EU-hosted & GDPR-compliant
No puzzles
Try free for 14 days

Get started Contact sales