TrustCaptcha · Bot protection

Keycloak CAPTCHA Plugin

Add a Keycloak CAPTCHA to your registration, login and password reset flows with our drop-in TrustCaptcha plugin. It stops fake accounts and automated password resets, and the flow stays puzzle-free and accessible for real users. Built in Europe, EU-hosted and GDPR-compliant.

Quickstart

How the integration works

1. Create a CAPTCHA

Create a user account or log in with an existing one. Then create a new CAPTCHA or pick an existing one. If you want to try TrustCaptcha first, every plan comes with a 14-day free trial.

The CAPTCHA overview page shows your site key and license key, and you create your API key there. Add your website’s domains to the authorized domains in the CAPTCHA security rules so they can use your CAPTCHA.

CAPTCHA security rules of a demo CAPTCHA.

2. Integrate the CAPTCHA Plugin

Download the latest version of our plugin trustcaptcha_keycloak-3.0.1.jar here and copy the file trustcaptcha_keycloak-3.0.1.jar to the providers directory of your Keycloak installation. For step-by-step instructions, read the CAPTCHA integration guide for Keycloak in our documentation.

Read the documentation

Currently, our Keycloak CAPTCHA plugin works with the following Keycloak flows:

Registration
Login
Forgot Password

Other frontend technology instead of Keycloak?
If you build with something other than Keycloak, or run several websites and apps, pick a different framework or platform here. If we have no pre-built integration for your frontend technology yet, your developers can integrate the CAPTCHA themselves using our documentation or ask our support team for a pre-built integration.

3. Configure the TrustCaptcha Plugin

You can find all the important information and installation instructions for registration, login and forgotten password in our Keycloak documentation.

4. Test your integration

TrustCaptcha is now active. Send a test request and check that it goes through.

FAQs

What does the Keycloak CAPTCHA plugin protect?

It protects Keycloak's most common public entry points, the Registration, Login and Forgot Password flows, so bots are stopped before they can create accounts or abuse password resets.

How do I install TrustCaptcha for Keycloak?

Download the plugin JAR and copy it into the Keycloak "providers" directory, then restart Keycloak. After that, enable the TrustCaptcha step in the Keycloak Admin Console under Authentication → Flows.

Do I need to change my application code to use it?

No. The integration is done inside Keycloak (via authentication flows), so your applications usually don’t need code changes.

Where do I enter the site key and API key?

In the Keycloak Admin Console, open the TrustCaptcha step inside the flow and paste your site key and API key from the TrustCaptcha dashboard. You can configure them per flow (for example, different settings for Login vs Registration).

Will the CAPTCHA show puzzles to users?

Usually not. TrustCaptcha runs in the background while users type, so most people won’t see any extra task or image puzzle.

Can I control how strict TrustCaptcha is for Keycloak?

Yes. You can tune strictness and security rules (like allowed websites, IP allow/block lists, bypass keys, and geo-blocking) in your TrustCaptcha settings, and apply different settings per Keycloak flow if needed.

Losing leads to CAPTCHAs?

TrustCaptcha blocks spam and bots, not customers. No puzzles, GDPR-compliant, EU-hosted.

No puzzles for visitors

The check runs in the background while visitors type, so more people finish your forms instead of giving up.

GDPR-compliant

Hosted in the EU, no cookies, encrypted transmission and automatic data deletion. Every customer gets a Data Processing Agreement.

Multi-layer security

Adaptive proof-of-work and risk scoring stop abuse early, even when attack traffic spikes.

Full control

Set the sensitivity, keep allow and block lists and use geoblocking. You decide how strict the check is.

Protect your Keycloak application with TrustCaptcha in just a few steps!

EU-hosted & GDPR-compliant
No puzzles
Try free for 14 days

Get started Contact sales