TrustCaptcha - Bot protection

TYPO3 CAPTCHA Plugin. Eliminate bots and spam.

TrustCaptcha swiftly safeguards your TYPO3 websites from spam and automated abuse using the pre-built CAPTCHA-for-TYPO3 extension. Eliminate frustrating image puzzles and micro-tasks that drive visitors away—keep forms fast and accessible. Stay safe from data leaks, legal warnings, and penalties: choose the European CAPTCHA alternative for TYPO3 with privacy-first design and strict GDPR compliance.

Start Free Trial

Contact Sales

GDPR compliant

EU hosted

Why TrustCaptcha

TrustCaptcha saves you money and increases your conversion

Save money! Eliminate botsProtect your website from bot attacks and spam. Save yourself the resulting follow-up costs for higher server capacity, support staff, moderation teams and software developers. Learn how TrustCaptcha eliminate bots

Avoid fines! Be GDPR compliantDon't worry about the legal situation, bureaucracy and the threat of fines. Use TrustCaptcha-for-TYPO3 as a data protection-friendly and GDPR-compliant CAPTCHA alternative. More about the GDPR-compliance of TrustCaptcha

Don't lose customers! Increase conversionDon't make it difficult for your users to use your website with annoying image puzzles or tasks. Our CAPTCHA-for-TYPO3 ensures maximum conversion by making the website accessible to everyone with one click. Learn how TrustCaptcha makes your website accessible

Start Free Trial

Book a Demo

Integrate TrustCaptcha

Integrate TrustCaptcha in TYPO3 now! Simply follow these steps

Integrate TrustCaptcha with TYPO3 quickly and easily into your website, application or platform in just a few steps and effectively protect your online presence and services from bot abuse.

1 – Sign in or sign up
The first thing you need to do is sign in to your Trustcomponent account. If you do not yet have a Trustcomponent account, you can register with us quickly and easily in just a few steps. After that, go to your dashboard. Here you will see all existing CAPTCHAs and can create new CAPTCHAs.
2 – Choose existing CAPTCHA or create a new CAPTCHA
If you already have a CAPTCHA that you want to use, skip this step. If you don't have a CAPTCHA yet, create a new CAPTCHA now.Create a new CAPTCHADuring the creation process, select the “TrustCaptcha” product category and choose your preferred pricing plan. If you are not yet sure which pricing plan to choose, no problem! The plan can be extended at any time. Then decide whether you want to start with the 30-day trial version or go straight to a paid subscription. If you want to start directly with a paid CAPTCHA, all you have to do is add your billing details and optionally a payment method and you're ready to go.30-day trial periodIf you opt for the 30-day trial period, you can test CAPTCHA for 30 days risk-free. At the end of the 30-day trial period, CAPTCHA locks itself. During the 30-day trial period or up to 30 days after the end of the trial period, you can unsubscribe from CAPTCHA at any time for a fee or delete it with immediate effect. If you neither subscribe to the CAPTCHA for a fee nor delete it within 30 days of the end of the free trial period, it will be deleted automatically.Non-Commercial PlanIn addition to our standard plans, we also offer a permanently free “Non Commercial“ plan with 1 website and up to 500 free verifications for non-commercial websites and projects.
3 – Add your websites and check your credentials
On the dashboard of your CAPTCHA you will find all the important information, statistics and setting options. Here you will also find your site-key, the secret-key and, if available, the license-key. You will need these later on when integrating your CAPTCHA.Add your websitesYour CAPTCHA may only be accessed by websites that you explicitly authorise. To allow websites to access the CAPTCHA, enter all the websites on which you want to integrate the CAPTCHA in the settings.
4 – Install the TYPO3 CAPTCHA plugin
Install the TYPO3 CAPTCHA extension via the Composer and Packagist. We are also planning to offer an installation option for the extension via the official plugin store in the near future. You can find more information about the extension installation and usage in our documentation.The TYPO3 extension currently supports the following functions and extensions:
- EXT: form
- EXT: powermail
5 – Configure the TYPO3 CAPTCHA plugin
Login as an admin and navigate to Admin Tools → Settings → Extension Configuration → trustcaptcha. Set your site-key, secret-key and if necessary the license key. Finally, customize TrustCaptcha to suit your needs.
You can now start using TrustCaptcha in your forms.For detailed installation and usage instructions please read our TYPO3 documentation.
6 – Congratulations 🎉
You are now protected by TrustCaptcha - congratulations!

Frequently Asked Questions

Do you need more information about the Angular integration?

Frequently Asked Questions

What is a TYPO3 CAPTCHA?

A TYPO3 CAPTCHA is a security widget that asks visitors to pass an automated check—typically a lightweight proof-of-work—to verify they are human before a form submission. It prevents spam entries, brute-force logins, and other bot activity on TYPO3 sites. CAPTCHA stands for “Completely Automated Public Turing test to tell Computers and Humans Apart,” a term introduced in 2003. Modern services like TrustCaptcha run quietly and automatically, so users are not confronted with disruptive image puzzles while protection works in the background.

What is the best TYPO3 CAPTCHA?

The best TYPO3 CAPTCHA balances strong bot resistance, privacy compliance, and easy customization—especially for EU-focused projects. TrustCaptcha offers layered defenses combining client-side proof-of-work, a real-time WordScore (bot score), and granular risk controls. EU hosting plus ready-to-sign Data Processing Agreements and an SLA make it GDPR-ready out of the box. Still, evaluate options such as TrustCaptcha, FriendlyCaptcha, CaptchaFox, or self-hosted tools like Altcha against your threat model and performance requirements.

How does a TYPO3 CAPTCHA work?

A script is injected into the TYPO3 form, issues a token, and prompts the browser to complete a small challenge; the server later verifies that token before processing. TrustCaptcha initiates this flow automatically, having the visitor perform a lightweight proof-of-work that slows bots without bothering people. At the same time, it computes a WordScore (bot likelihood) and forwards it to your backend, where you define thresholds in the plugin dashboard. All traffic remains within EU data centers to comply with GDPR and avoid cross-border transfers.

Do I need a TYPO3 CAPTCHA?

You should use a TYPO3 CAPTCHA if your site includes logins, contact forms, or checkout flows—prime targets for spam and credential-stuffing bots. Reports consistently show brute-force logins among the most common attacks. A multi-layered solution like TrustCaptcha blocks up to 99.9% of automated abuse before PHP executes, preserving server resources. Even if a WAF is in place, a CAPTCHA adds a valuable defense-in-depth layer to mission-critical forms.

Is TrustCaptcha GDPR-compliant for TYPO3 sites?

Yes. TrustCaptcha is hosted exclusively in European data centers and stores only the minimal technical data required for verification, aligning with GDPR data-minimization and storage-limitation principles. Data Processing Agreements and an SLA are available directly in your account, so compliance takes minutes, not weeks. Using the official TYPO3 extension keeps your site GDPR-aligned without extra paperwork—unlike many US-based alternatives.

How do I integrate TrustCaptcha with TYPO3?

Install the extension, add your site/secret keys, and enable TrustCaptcha for the forms you want to protect. In the backend you can adjust theme, language, visibility, and risk thresholds. Integration takes just a few steps—no deep template changes required.

Will TrustCaptcha slow down my TYPO3 site?

No. TrustCaptcha loads asynchronously with a small footprint and is compatible with Core Web Vitals. Because the proof-of-work runs in the browser, response times and cache hit rates remain stable even during bot surges. If desired, you can lower the work factor or enable TrustCaptcha only on higher-risk forms.

More about TrustCaptcha