captchaapi

<p>Protects WooCommerce (login, registration, lost password, checkout), Contact Form 7, WPForms, Fluent Forms, Formidable Forms, Forminator, Gravity Forms and Elementor Forms – cookieless, EU-hosted, no cookie banner required.</p>
<p>A privacy-first alternative to reCAPTCHA: captchaapi.eu stops form spam without making your visitors click traffic lights. A free tier with commercial use allowed gets you started. The work happens in the background: the visitor’s browser solves a small proof-of-work puzzle while they fill in the form, and a token rides along with the submission. There is nothing to solve and nothing to see.</p>
<p>When a form is submitted, your server confirms that token with captchaapi.eu over a single request, secured by your secret key. It is the same model every hosted CAPTCHA uses, and it keeps the secret on your server, never in the browser.</p>
<h4>Privacy by design</h4>
<ul>
<li>No cookies, and nothing to add to a cookie banner.</li>
<li>No tracking and no visitor profile. The IP address is used only for rate limiting and abuse detection, then dropped; it is never written to a database.</li>
<li>Hosted only in the EU, in Nuremberg, Germany. No data leaves the EU.</li>
<li>No images and no puzzles to solve. The check runs in the background, so it works the same for every visitor, including people who find image challenges difficult or browse with a screen reader.</li>
<li>A free tier, with commercial use allowed.</li>
</ul>
<h4>Forms and plugins it protects</h4>
<p>WordPress core:</p>
<ul>
<li>Login (wp-login.php)</li>
<li>Registration</li>
<li>Lost password</li>
<li>Comments</li>
</ul>
<p>WooCommerce:</p>
<ul>
<li>Login</li>
<li>Registration</li>
<li>Lost password</li>
<li>Checkout</li>
</ul>
<p>Form plugins:</p>
<ul>
<li>Contact Form 7</li>
<li>WPForms</li>
<li>Fluent Forms</li>
<li>Formidable Forms</li>
<li>Forminator</li>
<li>Gravity Forms</li>
<li>Elementor Forms</li>
</ul>
<p>Each form can be turned on or off from the settings screen. The WooCommerce and form-plugin options appear only when that plugin is active.</p>
<h4>How it works</h4>
<ol>
<li>The widget loads on the pages with a protected form and solves a proof-of-work puzzle in a Web Worker.</li>
<li>On submit, it attaches the resulting token to the form.</li>
<li>The plugin confirms the token with captchaapi.eu using your secret key and rejects the submission if the service does not accept it.</li>
</ol>
<p>Each token verifies exactly once – the service enforces single use – so the plugin keeps no local replay table and nothing to clean up on a schedule.</p>
<h4>You need an account</h4>
<p>This plugin connects to the captchaapi.eu service. Create a project at https://captchaapi.eu to get a site key and a secret key. A free tier is available.</p>
<h3>External services</h3>
<p>This plugin connects to captchaapi.eu, a third-party CAPTCHA service, to protect your forms from spam. It is required for the plugin to function.</p>
<p>On any public page that contains a protected form, the plugin loads the service’s widget script (captcha.js) from your configured captchaapi.eu endpoint. The visitor’s browser then communicates with the captchaapi.eu API to perform a proof-of-work challenge and obtain a token that is attached to the form on submit. This happens for every visitor who loads a protected form.</p>
<p>To issue and validate a token the service receives your public site key, the proof-of-work result, and – as with any HTTP request – the visitor’s IP address. The IP address is used for rate limiting and abuse/bot detection (including a coarse, IP-derived country) and is processed transiently: a hashed form and aggregate counters are held briefly in a cache. No raw IP address and no per-visitor record are written to a database. The service sets no cookies. Data is processed on servers in the EU (Nuremberg, Germany).</p>
<p>When a protected form is submitted, your server sends the token to the captchaapi.eu /verify endpoint, authenticated with your secret key, and trusts the service’s accept-or-reject answer. The secret key stays on your server and is never sent to the browser.</p>
<ul>
<li>Service provider: captchaapi.eu</li>
<li>Terms of Service: https://captchaapi.eu/legal/terms</li>
<li>Privacy Policy: https://captchaapi.eu/legal/privacy</li>
</ul>


GDPR Cookieless CAPTCHA for WooCommerce & Forms – captchaapi.eu

Cookieless, EU-hosted reCAPTCHA alternative for WooCommerce, WPForms, Fluent Forms & CF7. GDPR-clean, no cookie banner.

Matthias Pfefferle

Bernhard Kau

Pascal Birchler

Simon Kraft

pluginkollektiv

websupporter

Torsten Landsiedel

Florian Brinkmann

Alain Schlesser

<p>Say Goodbye to comment spam on your WordPress blog or website. <em>Antispam Bee</em> blocks spam comments and trackbacks effectively, without captchas and without sending personal information to third party services. It is free of charge, ad-free and 100% GDPR compliant.</p>
<h3>Feature/Settings Overview</h3>
<ul>
<li>Trust approved commenters.</li>
<li>Trust commenters with a Gravatar.</li>
<li>Consider the comment time.</li>
<li>Allow comments only in a certain language.</li>
<li>Block or allow commenters from certain countries.</li>
<li>Treat BBCode links as spam.</li>
<li>Use regular expressions.</li>
<li>Search local spam database for commenters previously marked as spammers.</li>
<li>Notify admins by e-mail about incoming spam.</li>
<li>Delete existing spam after n days.</li>
<li>Limit approval to comments/pings (will delete other comment types).</li>
<li>Select spam indicators to send comments to deletion directly.</li>
<li>Optionally exclude trackbacks and pingbacks from spam detection.</li>
<li>Optionally spam-check comment forms on archive pages.</li>
<li>Display spam statistics on the dashboard, including daily updates of spam detection rate and a total of blocked spam comments.</li>
</ul>
<h3>Support</h3>
<ul>
<li>Community support via the <a href="https://wordpress.org/support/plugin/antispam-bee" rel="ugc">support forums on wordpress.org</a></li>
<li>Read <a href="https://antispambee.pluginkollektiv.org/documentation/" rel="nofollow ugc">the documentation</a></li>
<li>We don’t handle support via e-mail, Twitter, GitHub issues etc.</li>
</ul>
<h3>Contribute</h3>
<ul>
<li>Active development of this plugin is handled <a href="https://github.com/pluginkollektiv/antispam-bee" rel="nofollow ugc">on GitHub</a>.</li>
<li>Pull requests for documented bugs are highly appreciated.</li>
<li>If you think you’ve found a bug (e.g. you’re experiencing unexpected behavior), please post at the <a href="https://wordpress.org/support/plugin/antispam-bee" rel="ugc">support forums</a> first.</li>
<li>If you want to help us translate this plugin you can do so <a href="https://translate.wordpress.org/projects/wp-plugins/antispam-bee" rel="nofollow ugc">on WordPress Translate</a>.</li>
</ul>
<h3>Credits</h3>
<ul>
<li>Author: <a href="https://sergejmueller.github.io/" rel="nofollow ugc">Sergej Müller</a></li>
<li>Maintainers: <a href="https://pluginkollektiv.org" rel="nofollow ugc">pluginkollektiv</a></li>
</ul>


Antispam Bee

I have been using this for several years now and not had a single issue with spam.

lightweight and awesome.

Thank you.

The best antispam plugin


Using it since years and had no spam in my blog ever. Simple, clean, works.


Best Antispam Plugin


I've tested this plugin and seems to working very well. Most spam comments are gone, some of them (just a little) are able to avoid spam filters.



There is something need to be fixed and I'm already posted in support forum. I hope that it will be fixed soon.


Very good spam filter plugin.


Works quite well without calling out to a remote service, and doesn't require your visitors to be using JavaScript. (Seriously, I posted a test comment using Dillo and it showed up in the moderation queue!) No need to deal with API keys or licensing.



There are some optional tactics that will call a remote service for things like language identification, but so far it's doing the job fine without them!



The only problem I've had with it is that it only acts on comments, not on other features like contact forms.


Privacy-friendly spam filter


Simple to set up and use. Catches all the spam and deletes it before I get a chance to see it. Might miss one or two pieces a week, but that's still better than JetPack and it preserves my users' privacy.


Works better than JetPack


This is an amazing free plugin!What a mental dysfunction to generate spam, what a waste of resources, time, attention.Antispam Bee does a great job, for free.Thank you!


Spam pest...

Sophisticated antispam plugin for effective daily comment and trackback spam-fighting. Built with data protection and privacy in mind.

GDPR Cookieless CAPTCHA for WooCommerce & Forms – captchaapi.eu vs Antispam Bee