TrustCaptcha · Bot protection

Magento 2 CAPTCHA Extension

Protect your Magento 2 storefront forms from automated abuse with our Magento 2 CAPTCHA extension, a native replacement for the built-in CAPTCHA. It covers customer sign-in, account creation, forgot password, contact, product reviews and more. Privacy-first: EU hosting, no cookies, no puzzles.

Quickstart

How the integration works

1. Create a CAPTCHA

Create a user account or log in with an existing one. Then create a new CAPTCHA or pick an existing one. If you want to try TrustCaptcha first, every plan comes with a 14-day free trial.

The CAPTCHA overview page shows your site key and license key, and you create your API key there. Add your website’s domains to the authorized domains in the CAPTCHA security rules so they can use your CAPTCHA.

CAPTCHA security rules of a demo CAPTCHA.

2. Integrate the CAPTCHA Plugin

Install the Magento CAPTCHA extension via Composer and Packagist. For step-by-step instructions, read the CAPTCHA integration guide for Magento 2 in our documentation.

Read the documentation

TrustCaptcha functions as a native Magento CAPTCHA replacement. Magento can decide whether a CAPTCHA is required and request it if necessary. Alternatively, the CAPTCHA can always be displayed. Currently, the following actions and forms are supported, among others:

Customer Login
Create Account / Registration
Forgot Password
Contact Form
Product Review Submission
Email to a Friend
Share Wishlist
Orders & Returns

Other frontend technology instead of Magento 2?
If you build with something other than Magento 2, or run several websites and apps, pick a different framework or platform here. If we have no pre-built integration for your frontend technology yet, your developers can integrate the CAPTCHA themselves using our documentation or ask our support team for a pre-built integration.

3. Configure the TrustCaptcha Plugin

Log in as an admin and go to Stores → Configuration → TrustComponent → TrustCaptcha. Set your site key, API key (formerly secret key) and, if needed, the license key. Finally, customize TrustCaptcha to suit your needs. You can find more information about the installation in our Magento 2 documentation.

4. Test your integration

TrustCaptcha is now active. Send a test request and check that it goes through.

FAQs

Which Magento 2 versions are supported?

The extension is tested with Magento 2.4.x and works with Magento 2 in general. If you run an older Magento 2 version or Adobe Commerce and hit an edge case, our support team will help you quickly.

What does the Magento 2 CAPTCHA extension do?

It adds CAPTCHA protection to common Magento storefront forms. Visitors solve a lightweight background check (no image puzzles), and your store blocks bot traffic while real customers can keep shopping.

Which forms are protected out of the box?

The extension supports common storefront actions such as Customer Login, Create Account/Registration, Forgot Password, Contact Form, Product Review Submission, Email to a Friend, Share Wishlist, and Orders & Returns.

Does it replace Magento’s built-in CAPTCHA or add a separate widget?

It works as a native Magento CAPTCHA replacement. Magento can decide when a CAPTCHA is required, or you can configure it to always show the CAPTCHA.

What is the bot score and what threshold should I use?

TrustCaptcha returns a bot probability score from 0 to 1 (0 = likely human, 1 = likely bot). The recommended default threshold is 0.5. Lower thresholds are stricter, higher thresholds are more tolerant. Adjust based on your risk level and customer feedback.

What happens when TrustCaptcha blocks a request?

The form action is stopped and Magento shows an error message. The visitor can try again, and you can also tune your settings if you see false blocks.

Do you support Checkout protection?

The extension protects the storefront forms listed above; the checkout is not part of it. If you need checkout protection, contact our support team.

Losing leads to CAPTCHAs?

TrustCaptcha blocks spam and bots, not customers. No puzzles, GDPR-compliant, EU-hosted.

No puzzles for visitors

The check runs in the background while visitors type, so more people finish your forms instead of giving up.

GDPR-compliant

Hosted in the EU, no cookies, encrypted transmission and automatic data deletion. Every customer gets a Data Processing Agreement.

Multi-layer security

Adaptive proof-of-work and risk scoring stop abuse early, even when attack traffic spikes.

Full control

Set the sensitivity, keep allow and block lists and use geoblocking. You decide how strict the check is.

Protect your Magento 2 application with TrustCaptcha in just a few steps!

EU-hosted & GDPR-compliant
No puzzles
Try free for 14 days

Get started Contact sales