hCaptcha for WP

The strongest CAPTCHA. Switch from reCAPTCHA and Turnstile for free.

A built-in Migration Wizard helps you move from Google reCAPTCHA or Cloudflare Turnstile to hCaptcha in just a few clicks.

hCaptcha is a drop-in replacement for reCAPTCHA that puts user privacy first.

Need to keep out bots? hCaptcha protects privacy while offering better protection against spam and abuse. Help build a better web.

hCaptcha for WP makes security easy with broad integration support, detailed analytics, and strong protection. Start protecting logins, forms, and more in minutes.

Benefits

• Privacy First: hCaptcha is designed to protect user privacy. It doesn’t retain or sell personal data, unlike platforms that gather, own, and monetize global behavior.
• Better Security: hCaptcha offers better protection against bots and abuse than other anti-abuse systems.
• Easy to Use: hCaptcha is easy to install and use with WordPress and popular plugins.
• Broad Integration: hCaptcha works with WordPress Core, WooCommerce, Contact Form 7, Elementor, and over 60 other plugins and themes.

Features

Highlights

• Migration Wizard: Migrate from Google reCAPTCHA or Cloudflare Turnstile to hCaptcha in just a few clicks.
• Built-in Anti-Spam: Honeypot fields and minimum submit time catch bots before the hCaptcha challenge, reducing friction for real users.
• Detailed Analytics: Get detailed analytics on hCaptcha events and form submissions.
• AI-Ready Security: Selected security actions are exposed via the WordPress Abilities API for automation and AI-driven workflows.
• Pro and Enterprise: Supports Pro and Enterprise versions of hCaptcha.
• No Challenge Modes: 99.9% passive and passive modes in Pro and Enterprise versions reduce user friction.
• Protect Site Content: Protects selected site URLs from bots with hCaptcha. Works best with Pro 99.9% passive mode.
• Logged-in Users: Optionally turn off hCaptcha for logged-in users.
• Delayed API Loading: Load the hCaptcha API instantly or on user interaction for zero page loading impact.
• IP Access Control: Allowlist trusted IPs to skip hCaptcha and denylist abusive IPs to block form submissions.
• Country Access Control: Allowlist or denylist countries to control where hCaptcha protections apply.
• Multisite Support: Sync hCaptcha settings across a Multisite Network.

Anti-Spam

• Honeypot Protection: A hidden field catches bots before they reach the hCaptcha challenge, reducing friction for real users.
• Minimum Submit Time: Blocks instant form submissions from automated scripts.
• IP Denylist: Block abusive IPs from submitting any protected form.
• Country Blocking: Restrict form submissions by country to stop region-specific spam campaigns.

Customization

• Language Support: Supports multiple languages.
• Custom Themes: Customize the appearance of hCaptcha to match your site.
• Custom Themes Editor: Edit custom themes directly in the plugin.
• Login Compatibility: Compatible with all major hide login, custom login, and 2FA login plugins.
• Login Attempts: Protect your site from brute force attacks.

Ease of Use

• Test Modes: Use hCaptcha in live and Pro/Enterprise test modes.
• Activation and Deactivation: Activate and deactivate plugins and themes with hCaptcha in one click.
• Forced Verification: Optionally force hCaptcha verification before form submission.
• Check Config: Check hCaptcha configuration before saving keys and settings.
• Auto-Verification: Automatically verify custom forms.
• Standard Sizes and Themes: Choose the size and theme of the hCaptcha widget.

Read the full description on the official page →