TrustComponent
Webflow
TrustCaptcha · Bot protection

Webflow CAPTCHA App

The TrustCaptcha Webflow app is the Webflow version of a CAPTCHA plugin: it protects contact forms and sign-ups from automated abuse. Real visitors send their forms without solving a puzzle. The app places the widget in your form, and your backend checks each submission and turns bots away. Built in Europe and EU-hosted, with ready-to-use GDPR documentation.

Quickstart

How the integration works

1. Create a CAPTCHA

Create a user account or log in with an existing one. Then create a new CAPTCHA or pick an existing one. If you want to try TrustCaptcha first, every plan comes with a 14-day free trial.

The CAPTCHA overview page shows your site key and license key, and you create your API key there. Add your website’s domains to the authorized domains in the CAPTCHA security rules so they can use your CAPTCHA.

Start of the CAPTCHA creation form.
CAPTCHA security rules of a demo CAPTCHA.

2. Integrate the CAPTCHA App

Install the Webflow CAPTCHA app via the official Webflow Marketplace. For step-by-step instructions, read the CAPTCHA integration guide for Webflow in our documentation.

Read the documentation

Other frontend technology instead of Webflow?
If you build with something other than Webflow, or run several websites and apps, pick a different framework or platform here. If we have no pre-built integration for your frontend technology yet, your developers can integrate the CAPTCHA themselves using our documentation or ask our support team for a pre-built integration.

Angular
Contact Form 7
Craft CMS
JavaScript
Joomla
JTL-Shop
Keycloak
Magento 2
React
Shopware 6
Svelte
TYPO3
Vue
Webflow
WordPress

3. Configure the TrustCaptcha App

In the Designer, select a form into which you want to integrate TrustCaptcha. Then start the TrustCaptcha app and use it to integrate the widget into your frontend. Afterwards, add the CAPTCHA validation logic to your backend. You can find more information about the installation in our Webflow documentation.

4. Test your integration

TrustCaptcha is now active. Send a test request and check that it goes through.

CAPTCHA done

FAQs

What does the Webflow CAPTCHA app do?
It places the TrustCaptcha widget in your Webflow form and adds a hidden field for the verification token. Your visitors see no puzzle, and your backend uses the token to accept or reject each submission.
How does TrustCaptcha block bots on a Webflow form?
The widget checks every visitor in the background and writes a verification token into the form. Your backend sends that token to TrustCaptcha, gets the result back and then accepts or rejects the submission. That last step is what keeps bots out, so make sure your form handler does it.
Do I need my own backend to use TrustCaptcha with Webflow?
Yes. To stop bots, the token is validated by a server or serverless function that receives your form data and asks TrustCaptcha for the result. Our Webflow documentation shows how.
Where do I find the CAPTCHA token in a Webflow form submission?
As soon as the widget has checked the visitor in the background, the token is written into a hidden form field (default name: "tc-verification-token"). Your backend reads this value.
Can I use TrustCaptcha on multiple pages or multiple forms in the same Webflow site?
Yes. You can place it on as many pages and forms as you like. Best practice is one widget per form.
Why is my widget red or “not authorized” in Webflow?
This usually means the current domain is not allowed in your TrustCaptcha security rules. Add the exact domain you are testing on (staging and production may be different).
Can I use TrustCaptcha without the Webflow app?
Yes. If your Webflow plan allows custom code, you can embed the widget manually. The app is simply the easiest way to insert it.
Losing leads to CAPTCHAs?

TrustCaptcha blocks spam and bots, not customers. No puzzles, GDPR-compliant, EU-hosted.

CAPTCHA start
CAPTCHA done
No puzzles for visitors
The check runs in the background while visitors type, so more people finish your forms instead of giving up.
GDPR-compliant
Hosted in the EU, no cookies, encrypted transmission and automatic data deletion. Every customer gets a Data Processing Agreement.
Multi-layer security
Adaptive proof-of-work and risk scoring stop abuse early, even when attack traffic spikes.
Full control
Set the sensitivity, keep allow and block lists and use geoblocking. You decide how strict the check is.

Protect your Webflow application with TrustCaptcha in just a few steps!

  • EU-hosted & GDPR-compliant
  • No puzzles
  • Try free for 14 days