TrustCaptcha – Bot protection

Magento 2 CAPTCHA Extension

Protect your Magento 2 storefront forms from automated abuse with our native CAPTCHA replacement. Cover customer sign-in, account creation, forgot password, contact, product reviews and more. Privacy-first: EU hosting, no cookies, no puzzles.

Quickstart

How the integration works

1. Create a CAPTCHA

Create a user account or log in with an existing one. Then create a new CAPTCHA or select an existing one. If you’re unsure whether TrustCaptcha is right for you, try our CAPTCHA service risk-free for 14 days at no cost.

On the CAPTCHA overview page, you will find all the important information, such as the site key, secret key and licence key. Allow your websites to access your CAPTCHA by simply adding them to the access authorised domain list in the CAPTCHA security rules.

CAPTCHA security rules of a demo CAPTCHA.

2. Integrate the CAPTCHA Plugin

Install the Magento CAPTCHA extension via the Composer and Packagist. We are also planning to offer an installation option for the extension via the official plugin store in the near future. For precise, detailed instructions, please read the CAPTCHA integration guide for Magento 2 in our documentation.

Read the documentation

TrustCaptcha functions as a native Magento CAPTCHA replacement. Magento can decide whether a CAPTCHA is required and request it if necessary. Alternatively, the CAPTCHA can always be displayed. Currently, the following actions and forms are supported, among others:

Customer Login
Create Account / Registration
Forgot Password
Contact Form
Product Review Submission
Email to a Friend
Share Wishlist
Orders & Returns

Other frontend technology instead of Magento 2?
If you do not want to use Magento 2 or have several websites or applications, you can select a different framework or platform here. If there is no pre-built integration from us for your preferred frontend technology, your software developers can integrate the CAPTCHA themselves using our documentation or ask our support-team for a pre-built integration solution.

3. Configure the TrustCaptcha Plugin

Login as an admin and go to Stores → Configuration → TrustComponent → TrustCaptcha. Set your site-key, secret-key and if necessary the license key. Finally, customize TrustCaptcha to suit your needs. You can find more information about the installation in our Magento 2 documentation.

4. Congratulations 🎉

You are now protected by TrustCaptcha - congratulations!

FAQs

Which Magento 2 versions are supported?

The extension is tested with Magento 2.4.x and works with Magento 2 in general. If you run an older Magento 2 version or Adobe Commerce and hit an edge case, our support team will help you quickly.

What does the Magento 2 extension do in simple terms?

It adds a CAPTCHA protection to common Magento storefront forms. Visitors solve a lightweight background check (no image puzzles), and your store blocks bot traffic while real customers can keep shopping.

Which forms are protected out of the box?

The extension supports common storefront actions such as Customer Login, Create Account/Registration, Forgot Password, Contact Form, Product Review Submission, Email to a Friend, Share Wishlist, and Orders & Returns.

Does it replace Magento’s built-in CAPTCHA or add a separate widget?

It works as a native Magento CAPTCHA replacement. Magento can decide when a CAPTCHA is required, or you can configure it to always show the CAPTCHA.

What is the bot score and what threshold should we use?

TrustCaptcha returns a bot probability score from 0 to 1 (0 = likely human, 1 = likely bot). The recommended default threshold is 0.5. Lower thresholds are stricter, higher thresholds are more tolerant—adjust based on your risk level and customer feedback.

What happens when TrustCaptcha blocks a request?

The form action is stopped and Magento shows an error message. The visitor can try again, and you can also tune your settings if you see false blocks.

Do you support Checkout protection?

Checkout support is planned and expected to be available soon. If you need Checkout protection urgently, contact our support team and we’ll guide you.

Losing leads to CAPTCHAs?

TrustCaptcha blocks spam and bots, not customers. No puzzles, GDPR-ready, EU-hosted.

Puzzle-free UX

Runs in the background while visitors type — so more people finish your forms and fewer drop off.

GDPR-ready

EU-hosted and privacy-first: no cookies, encrypted transmission, automatic cleanup — with ready-to-use legal resources.

Multi-layer Security

Adaptive protection plus intelligent risk scoring stops abuse early — even when attack traffic spikes.

Full Control

Fine-tune sensitivity, set allow/block lists, and use geoblocking — you decide how strict verification should be.

Protect your Magento 2 application with TrustCaptcha in just a few steps!

EU-hosted & GDPR-ready
No puzzles
Try free for 14 days

Get started Contact sales