Spam protection

hCaptcha in Core Forms

Privacy-friendly, GDPR-aware spam protection as a reCAPTCHA alternative.

Bundled with Core Forms, the WordPress forms plugin with every premium feature in the box. No add-on tax.

Bundled, no add-on tax Unlimited sites Use code CFLAUNCH for 20% off either plan. Ends September 30, 2026 (IST).

hCaptcha is the privacy-respecting drop-in replacement for reCAPTCHA. Core Forms offers it as a first-class option for sites that don’t want Google in the request path.

What you get

How hCaptcha works in Core Forms

GDPR-friendly

No advertising tracking, no Google cookies.

Invisible mode

Default flow is silent unless a user looks suspicious.

Per-form override

Mix and match — use hCaptcha on contact forms only, for example.

Set it up

Connect hCaptcha in 3 minutes

1

Register at hcaptcha.com

Create a sitekey for your domain.
2

Paste keys

Settings → hCaptcha, paste the sitekey and secret.
3

Enable on a form

Form → Settings → Spam protection → hCaptcha.

Pairs well with

Related integrations

reCAPTCHA v3

Google reCAPTCHA v3 with per-form score thresholds and invisible challenges.

Cloudflare Turnstile

Modern, invisible-first CAPTCHA from Cloudflare — no tracking, no puzzles.

Akismet

Automattic Akismet spam filtering with configurable whitelist keywords.

Browse all integrations →

Bundled with every Core Forms license.

hCaptcha and every Core Forms-built integration on this site are included with your license. Use code CFLAUNCH for 20% off either plan. Ends September 30, 2026 (IST).

Get Lifetime — $249 Yearly — $59/yr