TrustCaptcha – Bot protection

Keycloak CAPTCHA Plugin

Protect your Keycloak sign-up and sign-in journeys with a drop-in CAPTCHA plugin from TrustCaptcha. Stop fake accounts and automated password resets while keeping UX smooth and accessible. Built in Europe, with EU hosting and GDPR compliance.

Quickstart

How the integration works

1. Create a CAPTCHA

Create a user account or log in with an existing one. Then create a new CAPTCHA or select an existing one. If you’re unsure whether TrustCaptcha is right for you, try our CAPTCHA service risk-free for 14 days at no cost.

On the CAPTCHA overview page, you will find all the important information, such as the site key, secret key and licence key. Allow your websites to access your CAPTCHA by simply adding them to the access authorised domain list in the CAPTCHA security rules.

CAPTCHA security rules of a demo CAPTCHA.

2. Integrate the CAPTCHA Plugin

Download the latest version of our plugin trustcaptcha_keycloak_2-0-0.jar here and copy the file trustcaptcha_keycloak_2-0-0.jar to the providers directory of your Keycloak installation. For precise, detailed instructions, please read the CAPTCHA integration guide for Keycloak in our documentation.

Read the documentation

Currently, our Keycloak CAPTCHA plugin for TrustCaptcha is compatible with the following Keycloak plugins:

Registration
Login
Forgot Password

Other frontend technology instead of Keycloak?
If you do not want to use Keycloak or have several websites or applications, you can select a different framework or platform here. If there is no pre-built integration from us for your preferred frontend technology, your software developers can integrate the CAPTCHA themselves using our documentation or ask our support-team for a pre-built integration solution.

3. Configure the TrustCaptcha Plugin

You can find all the important information and installation instructions for registration, login and forgotten password in our Keycloak documentation.

4. Congratulations 🎉

You are now protected by TrustCaptcha - congratulations!

FAQs

What does the TrustCaptcha Keycloak plugin protect?

It protects Keycloak’s most common public entry points: Registration, Login, and Forgot Password flows, so bots are stopped before they can create accounts or abuse password resets.

How do I install TrustCaptcha for Keycloak?

Download the plugin JAR and copy it into the Keycloak "providers" directory, then restart Keycloak. After that, enable the TrustCaptcha step in the Keycloak Admin Console under Authentication → Flows.

Do I need to change our application code to use it?

No. The integration is done inside Keycloak (via authentication flows), so your applications usually don’t need code changes.

Where do I enter the site key and secret key?

In the Keycloak Admin Console, open the TrustCaptcha step inside the flow and paste your site key and secret key from the TrustCaptcha dashboard. You can configure them per flow (for example, different settings for Login vs Registration).

Will the CAPTCHA show puzzles to users?

Usually not. TrustCaptcha runs in the background while users type, so most people won’t see any extra task or image puzzle.

Can I control how strict TrustCaptcha is for Keycloak?

Yes. You can tune strictness and security rules (like allowed websites, IP allow/block lists, bypass keys, and geo-blocking) in your TrustCaptcha settings, and apply different settings per Keycloak flow if needed.

Losing leads to CAPTCHAs?

TrustCaptcha blocks spam and bots, not customers. No puzzles, GDPR-ready, EU-hosted.

Puzzle-free UX

Runs in the background while visitors type — so more people finish your forms and fewer drop off.

GDPR-ready

EU-hosted and privacy-first: no cookies, encrypted transmission, automatic cleanup — with ready-to-use legal resources.

Multi-layer Security

Adaptive protection plus intelligent risk scoring stops abuse early — even when attack traffic spikes.

Full Control

Fine-tune sensitivity, set allow/block lists, and use geoblocking — you decide how strict verification should be.

Protect your Keycloak application with TrustCaptcha in just a few steps!

EU-hosted & GDPR-ready
No puzzles
Try free for 14 days

Get started Contact sales