Set Up hCaptcha on WordPress forms

How to Set Up hCaptcha on WordPress Forms

Looking for a way to set up hCaptcha on your WordPress forms?

hCaptcha is a great Google reCAPTCHA alternative — and it’s completely free.

In this tutorial, we’ll walk you through how to set up hCaptcha on your forms (easily).

Fix Your Contact Form Emails Now

What Is hCaptcha?

hCaptcha is a popular free CAPTCHA service. It’s an anti-spam tool that protects websites from hackers and spammers. And it’s the best Google reCAPTCHA alternative.

The hCaptcha privacy policy is compatible with recent regulations such as GDPR and CCPA. So if you’re concerned about your site’s privacy, hCaptcha might be the right anti-spam tool for your forms.

How To Set Up hCaptcha on WordPress Forms

Setting up hCaptcha on WordPress forms is super easy. Here’s a table of contents for the tutorial:

So let’s get started!

Step 1: Install and Activate WPForms

The first thing you’ll need to do is download and activate the WPForms plugin.

For this tutorial, you can use WPForms Lite or WPForms Pro.

Activate WPForms

If you’re new to WordPress, here’s a step-by-step guide on how to install a WordPress plugin to help you get started.

Next, you’ll need to select the hCaptcha option from WPForms’ settings.

To do that, head over to your WordPress dashboard and click WPForms » Settings.

WPForms settings

This will open your WPForms settings page. You can see multiple tab options at the top of the settings page. Click on the CAPTCHA tab from the tabs across the top.

WPForms CAPTCHA settings

You’ll see two 3 popular CAPTCHA services: Cloudflare Turnstile, hCaptcha, and reCAPTCHA.

Select the hCaptcha option.

Select hCaptcha in WordPress

As soon as you select the hCaptcha option, you’ll see settings to add hCaptcha Site and Secret Key. We’ll generate these now.

Step 2: Set Up hCaptcha Sitekey

To get hCaptcha keys, open the official hCaptcha site in a new tab and remember to keep open WPForms in another tab.

Log in to your hCaptcha account and add a new site.

Add a new site in hCaptcha

This will open a page where you need to add your site details.

The first section you’ll see here is the Add New Sitekey section. Here you can add a name to this specific Sitekey, but it’s only for your reference, so don’t worry too much about what you call it.

Name your hCaptcha Sitekey

Now in the second section, you’ll need to define all of the websites you want to use this key on. Click the plus button if you need to add more.

hCaptcha general information

If you’re using a free hCaptcha account, you’ll have to use the Always Challenge mode, so let’s skip this step.

Challenge mode in hCaptcha

Next, you’ll want to decide how difficult your CAPTCHAs should be. hCaptcha calls this the Passing Threshold.

hCaptcha passing threshold

For most WordPress forms, Auto will work just fine. If you want to control this setting, here’s a general guide to what each threshold means:

  • Easy displays the standard “easy” challenges to validate users.
  • Moderate shows a slightly more difficult challenge.
  • Difficult shows a challenge that is hard to solve. While this is the most secure, it could also be frustrating, so you may want to consider what the form is for and who will be using it.

And that’s it! Your hCaptcha key is set up. Now let’s switch back to WordPress and add it to your forms.

Step 3: Add Sitekey to WPForms

Adding your sitekey to WPForms will complete the connection between your WordPress site and hCaptcha.

Staying on the hCaptcha site for a moment, click on the Settings button to start.

Get hCaptcha sitekey

Copy the sitekey and paste it in to the Site Key field in WPForms.

hCaptcha site key

Next, we need to add the Secret Key.

To copy your secret key, click on your profile picture at the top-right of the hCaptcha website.

Then click Settings.

hCaptcha settings

Copy your secret key here.

Copy hCaptcha secret key

Once you’ve pasted your Secret Key into your WPForms settings, the connection will be complete.

If you’d like to customize your hCaptcha settings further, you can change the Fail Message before saving.

hCaptcha fail message in WPForms

And that’s it! Now we can quickly add hCaptcha to your forms in WordPress.

Step 4: Create a New Form

Now that you’ve configured all hCaptcha settings, it’s time to enable it in your online contact forms.

For that, we need to open a form you’ve created.

If you haven’t made your form yet, create a new form using the WPForms plugin.

Add new form in WPForms

WPForms comes with a huge form template library that consists of several pre-built form templates such as:

The major benefit of using a pre-built template is that you don’t have to build your form from scratch.

We’ll choose the Simple Contact Form template.

WPForms contact form template

Once you select the temple, WPForms form builder setup will open. You can see form on the right and a drag and drop builder on the left.

WPForms contact form template

You can add additional fields to your online form by dragging and dropping them from left to right.

Step 5: Add hCaptcha Field on WordPress Form

Our online form is ready; it’s time to secure it with hCaptcha.

To add the hCaptcha field to your form, on the left side of the form builder, under the Standard Fields section, click on the hCaptcha field.

WPForms hCaptcha field in WordPress

As soon as you click the hCaptcha field, a popup will be displayed to confirm that you’ve turned on hCaptcha for this form. Click OK.

WPForms hCaptcha field confirmation

The hCaptcha logo on the top-right of your form will confirm hCaptcha service is activated on your form.

hCaptcha on WordPress form

This logo is only to remind you that the hCaptcha is active on your form and not displayed on your published form.

Click on the Save button and add WPForms to a page in WordPress.

Step 6: Test Your New hCaptcha Field

Now you need to make sure that hCaptcha works properly with your contact form or not.

To test hCaptcha, open the contact form on your site’s front-end, fill in your form entries and check the hCaptcha box. Depending on the difficulty level you chose, you may see a challenge pop up.

hCaptcha on WordPress form with WPForms

And that’s it! Now you know how to use hCaptcha on WordPress forms.

Note: Remember to test your contact form in another browser or incognito window where you haven’t logged in as an admin on your site.

Fix Your Contact Form Emails Now

Next, Add a GDPR Agreement to Online Forms

And there you’ve it! This is how simple it’s to set up hCaptcha on WordPress forms. We hope this article helps you create more protected and secure online forms for your WordPress websites.

After adding hCaptcha, you might need to add a GDPR agreement to your forms. Check out our step-by-step tutorial on how to add a GDPR agreement to your WordPress forms.

We also have a guide that’ll help you out if WPForms is not sending email.

Ready to fix your emails? Get started today with the best WordPress SMTP plugin. If you don’t have the time to fix your emails, you can get full White Glove Setup assistance as an extra purchase, and there’s a 14-day money-back guarantee for all paid plans.

If this article helped you out, please follow us on Facebook and Twitter for more WordPress tips and tutorials.

Disclosure: Our content is reader-supported. This means if you click on some of our links, then we may earn a commission. See how WPForms is funded, why it matters, and how you can support us.

Claire Broadley

Claire is the Content Manager for the WP Mail SMTP team. She has 13+ years' experience writing about WordPress and web hosting. Learn More

Try our Free WP Mail SMTP plugin

Use your favorite SMTP provider to reliably send your WordPress emails.

Please enable JavaScript in your browser to complete this form.

2 comments on “How to Set Up hCaptcha on WordPress Forms

Add a Comment

We're glad you have chosen to leave a comment. Please keep in mind that all comments are moderated according to our privacy policy, and all links are nofollow. Do NOT use keywords in the name field. Let's have a personal and meaningful conversation.

This form is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.