JTL Shop
TrustCaptcha – Bot protection

JTL Shop CAPTCHA Plugin

Protect key JTL Shop forms like contact, newsletter signup, account creation, and checkout from bots and spam with our native TrustCaptcha plugin. EU-hosted, privacy-first, no cookies, no puzzles.

Quickstart

How the integration works

1. Create a CAPTCHA

Create a user account or log in with an existing one. Then create a new CAPTCHA or select an existing one. If you’re unsure whether TrustCaptcha is right for you, try our CAPTCHA service risk-free for 14 days at no cost.

On the CAPTCHA overview page, you will find all the important information, such as the site key, secret key and licence key. Allow your websites to access your CAPTCHA by simply adding them to the access authorised domain list in the CAPTCHA security rules.

Start of the CAPTCHA creation form.
CAPTCHA security rules of a demo CAPTCHA.

2. Integrate the CAPTCHA Plugin

Install the JTL Shop TrustCaptcha plugin by uploading out JTL CAPTCHA plugin as a ZIP file in your JTL Shop admin area (Plug-ins → Plug-in manager → Upload). After the upload, refresh the page and install the plugin from Plug-ins → Plug-in manager → Available. For precise, step-by-step instructions, please read the CAPTCHA integration guide for JTL Shop in our documentation.

Read the documentation

TrustCaptcha works as a native JTL Shop spam protection provider. JTL decides when TrustCaptcha is required and therefore displayed. Currently, the plugin supports these areas:

  • Availability requests
  • Contact us
  • Create customer account
  • Forgot password
  • Newsletter
  • Order completion
  • Order without registration
  • Question about item

Different platform instead of JTL Shop?
If you do not want to use JTL Shop or have several websites or applications, you can select a different framework or platform here. If there is no pre-built integration from us for your preferred frontend technology, your software developers can integrate the CAPTCHA themselves – using our documentation – or ask our support-team for a pre-built integration solution.

Android
Angular
Craft CMS
Flutter
iOS
JavaScript
Joomla
JTL-Shop
Keycloak
Magento 2
React
React Native
Svelte
TYPO3
Vue
Webflow
WordPress

3. Configure the TrustCaptcha Plugin

Log in as an admin and go to Plug-ins → Installed plug-ins → TrustCaptcha. Enter your site-key, secret-key and – if needed – the license-key. Then adjust settings like language, theme, and the bot-score threshold.

Finally, enable TrustCaptcha where you need it: in the admin area, search for “spam protection” and set “Enable spam protection” to “Yes” for the areas you want to protect. You can find more details in our JTL Shop documentation.

JTL Shop TrustCaptcha plugin settings

4. Congratulations 🎉

You are now protected by TrustCaptcha - congratulations!

CAPTCHA done

FAQs

Which JTL Shop versions are supported?
The TrustCaptcha plugin supports JTL Shop 5. For special setups, see the documentation to confirm compatibility.
What does the JTL Shop plugin do?
It connects TrustCaptcha with JTL Shop’s native spam protection, so bots are blocked while real customers can submit forms without image puzzles.
Which JTL Shop areas can I protect?
Protect availability requests, contact forms, account creation, password reset, newsletter signup, "question about item", and checkout steps like guest checkout and order completion.
Does it replace JTL’s CAPTCHA or add another widget?
It works as a native spam-protection provider. JTL decides when TrustCaptcha is required and shows it only when needed.
How do I set it up?
Install the plugin ZIP, enter your site-key, secret-key and license-key, then enable "spam protection" for the areas you want to secure.
What is bot score and what threshold should I start with?
Bot score ranges from 0 (human) to 1 (bot). Start with the default threshold 0.5, then adjust higher for fewer blocks or lower for stricter protection.
Can I customize design and language?
Yes. Choose light/dark/auto themes, set language auto-detect, use custom designs and white-labeling, and enable options like autostart or invisible mode.
Do I need cookie consent for TrustCaptcha?
Usually not. TrustCaptcha works without cookies and many shops rely on legitimate interest for security. Always align the setup with your legal requirements.
Losing leads to CAPTCHAs?

TrustCaptcha blocks spam and bots, not customers. No puzzles, GDPR-ready, EU-hosted.

CAPTCHA start
CAPTCHA done
Puzzle-free UX
Runs in the background while visitors type — so more people finish your forms and fewer drop off.
GDPR-ready
EU-hosted and privacy-first: no cookies, encrypted transmission, automatic cleanup — with ready-to-use legal resources.
Multi-layer Security
Adaptive protection plus intelligent risk scoring stops abuse early — even when attack traffic spikes.
Full Control
Fine-tune sensitivity, set allow/block lists, and use geoblocking — you decide how strict verification should be.

Protect your JTL Shop application with TrustCaptcha in just a few steps!

  • EU-hosted & GDPR-ready
  • No puzzles
  • Try free for 14 days