WordPress CAPTCHA Plugin

TrustCaptcha works with all of these WordPress plugins. Contact Form 7, WPForms, Forminator, Mailchimp for WordPress, bbPress, WooCommerce and the WordPress forms get the widget automatically once you activate them in the Plugins tab. In Elementor Forms, Gravity Forms, Fluent Forms and Ninja Forms you add a TrustCaptcha field to each form you want to protect.

Contact Form 7

For a full walkthrough, see the Contact Form 7 CAPTCHA guide. TrustCaptcha protects every Contact Form 7 form on your site, and you do not need to add a form tag for it. Activate Contact Form 7 in the Plugins tab and the widget appears above the submit button of each form. When a submission fails the check, Contact Form 7 treats it as spam: the mail is not sent and the visitor sees an error message.

Elementor Forms

Elementor Forms is the form widget in Elementor Pro, and the TrustCaptcha option shows up in the Plugins tab as soon as Elementor Pro is active. After you activate it, open your form in the Elementor editor, add a new field and pick TrustCaptcha as the field type. If the check fails, Elementor shows the error at that field and does not send the form.

WPForms

TrustCaptcha works with WPForms Lite and WPForms Pro. Once WPForms is activated in the Plugins tab, the widget is placed above the submit button of your WPForms forms automatically. A submission that fails the check is stopped, and WPForms shows the error at the bottom of the form.

Gravity Forms

Gravity Forms gets its own TrustCaptcha field. Activate Gravity Forms in the Plugins tab, open a form in the Gravity Forms editor and add the TrustCaptcha field from the Advanced Fields group. Only forms that contain the field are checked, so you decide form by form. On multi-page forms the check runs when the visitor submits the last page.

Fluent Forms

In Fluent Forms you add TrustCaptcha as an element. Activate Fluent Forms in the Plugins tab, open your form in the Fluent Forms editor and drag the TrustCaptcha element from the Advanced Fields sidebar into the form, ideally right above the submit button. Only forms that contain the element are checked.

Forminator

TrustCaptcha protects Forminator forms automatically. Activate Forminator in the Plugins tab and your Forminator forms get the widget, with no field to place.

Ninja Forms

In Ninja Forms you add TrustCaptcha as a field. Activate Ninja Forms in the Plugins tab, open the form, add a new field and pick TrustCaptcha from the Misc Fields. This also works for multi-step forms built with the Ninja Forms Multi Step add-on.

Mailchimp for WordPress

Signup forms from the Mailchimp for WordPress plugin (MC4WP) are protected automatically once you activate it in the Plugins tab. That way bots cannot fill your newsletter list with fake addresses through the form.

WooCommerce

WooCommerce has four forms you can protect separately in the Plugins tab: login, registration, lost password and checkout. On the checkout the widget sits above the Place order button, and if the check fails, WooCommerce shows an error notice and the order is not placed. Bots that test stolen card numbers come in through the checkout, so it is the first shop form to protect.

bbPress

On bbPress forums, TrustCaptcha protects two forms: new topics and replies. Activate them in the Plugins tab and the widget is added automatically, so every new topic and reply has to pass the check before it is posted.

WordPress comments and registration

WordPress’s own forms are in the Plugins tab too: comments, login, registration and lost password. Activate the ones you use and the widget is added automatically. If the WooCommerce login is active, the plugin turns off the check on the WordPress login, so customers are not checked twice.

Replace reCAPTCHA on WordPress

Moving a WordPress site from reCAPTCHA to TrustCaptcha takes the steps above plus some cleanup. Set up TrustCaptcha first, activate it for the same forms reCAPTCHA protects today and test each of them. Then remove reCAPTCHA: deactivate the reCAPTCHA plugin, or delete the reCAPTCHA keys in your form plugin’s settings. If your Elementor forms use a reCAPTCHA field, replace it with the TrustCaptcha field. If a reCAPTCHA plugin also covers your WooCommerce login or checkout, switch it off there as well, so customers are not checked twice.

Once reCAPTCHA is gone, Google’s script no longer loads on your pages. TrustCaptcha sets no cookies and processes data in EU data centers. Your privacy policy probably still names reCAPTCHA; for TrustCaptcha, our documentation has a sample text you can start from. This is not legal advice, so check the wording with your data protection officer.