captchaapi

<p>Protects WooCommerce (login, registration, lost password, checkout), WPForms, Fluent Forms, Formidable Forms, Forminator and Contact Form 7 – cookieless, EU-hosted, no cookie banner required.</p>
<p>A privacy-first alternative to reCAPTCHA: captchaapi.eu stops form spam without making your visitors click traffic lights. A free tier with commercial use allowed gets you started. The work happens in the background: the visitor’s browser solves a small proof-of-work puzzle while they fill in the form, and a signed token rides along with the submission. There is nothing to solve and nothing to see.</p>
<p>Your server checks that token locally with your secret key. No request is sent back to captchaapi.eu when a form is submitted, so the check adds no network latency and keeps working even if our service is briefly unreachable.</p>
<p>The service runs on hardware in the EU (Nuremberg, Germany). It sets no cookies and writes no per-visitor record to a database; the visitor’s IP address is used only transiently for rate limiting and abuse detection.</p>
<h4>What it protects</h4>
<ul>
<li>Login (wp-login.php and WooCommerce)</li>
<li>Registration (WordPress and WooCommerce)</li>
<li>Lost password (WordPress and WooCommerce)</li>
<li>Comments</li>
<li>WooCommerce checkout</li>
<li>Contact Form 7</li>
<li>WPForms</li>
<li>Fluent Forms</li>
<li>Formidable Forms</li>
<li>Forminator</li>
</ul>
<p>Each surface can be turned on or off from the settings screen. Integration options for Contact Form 7, WooCommerce, and the supported form plugins appear only when that plugin is active.</p>
<h4>How it works</h4>
<ol>
<li>The widget loads on the pages with a protected form and solves a proof-of-work puzzle in a Web Worker.</li>
<li>On submit, it attaches a short-lived, signed attestation to the form.</li>
<li>The plugin verifies the attestation with your secret key (an HMAC check) and rejects the submission if it is missing, forged, expired, or reused.</li>
</ol>
<p>Reuse is blocked with a single-use record per token. If your site has a persistent object cache (Redis or Memcached), that record lives there. Otherwise the plugin keeps a small table and clears expired rows on a schedule.</p>
<h4>You need an account</h4>
<p>This plugin connects to the captchaapi.eu service. Create a project at https://captchaapi.eu to get a site key and a secret key. A free tier is available.</p>
<h3>External services</h3>
<p>This plugin connects to captchaapi.eu, a third-party CAPTCHA service, to protect your forms from spam. It is required for the plugin to function.</p>
<p>On any public page that contains a protected form, the plugin loads the service’s widget script (captcha.js) from your configured captchaapi.eu endpoint. The visitor’s browser then communicates with the captchaapi.eu API to perform a proof-of-work challenge and obtain a signed attestation that is attached to the form on submit. This happens for every visitor who loads a protected form.</p>
<p>To issue and validate an attestation the service receives your public site key, the proof-of-work result, and – as with any HTTP request – the visitor’s IP address. The IP address is used for rate limiting and abuse/bot detection (including a coarse, IP-derived country) and is processed transiently: a hashed form and aggregate counters are held briefly in a cache. No raw IP address and no per-visitor record are written to a database. The service sets no cookies. Data is processed on servers in the EU (Nuremberg, Germany).</p>
<p>Verification of the attestation on submit is performed locally on your server with your secret key; no request is sent back to captchaapi.eu at that point.</p>
<ul>
<li>Service provider: captchaapi.eu</li>
<li>Terms of Service: https://captchaapi.eu/legal/terms</li>
<li>Privacy Policy: https://captchaapi.eu/legal/privacy</li>
</ul>


GDPR Cookieless CAPTCHA for WooCommerce & Forms – captchaapi.eu

Cookieless, EU-hosted reCAPTCHA alternative for WooCommerce, WPForms, Fluent Forms & CF7. GDPR-clean, no cookie banner.

Olaf Lederer

<p>This free contact form plugin is used to create accessible contact forms with advanced spam protection (honeypot, cookie and optionally Cloudflare Turnstile or hCaptcha). In contrary to most other form plugins, there is no form-builder included.</p>
<h4>Features</h4>
<ul>
<li>The generated form is accessible and works even when the visitor has disabled Javascript</li>
<li>Accessible form field validation</li>
<li>Protect your forms against spam bots using a honeypot and cookies</li>
<li>Track successfully submitted forms in Google Analytics and/or Clicky</li>
<li>Create multiple contact forms via an easy to use interface and add the form via the block editor or using a shortcode</li>
<li>Collect form submissions for all your forms or the forms you choose</li>
<li>Get insights which spam protection feature works the best for your form. A simple log file keeps track about the different spam attempts</li>
<li>Multiple responder emails, send a HTML formatted mail in response to the form submission</li>
<li>Works with the default wp_mail() function (use it together with the <a href="https://wordpress.org/plugins/simple-smtp-by-maileroo/" rel="ugc">Maileroo</a> plugin to send emails via SMTP)</li>
<li>Optional: Protect your forms by blocking specific countries which are not relevant for your website or business</li>
<li>Optional: Protect your contact form with the plugin <a href="https://wordpress.org/plugins/honeypot/" rel="ugc">WP Armour – Honeypot Anti Spam</a></li>
<li>Optional: Email address verification with the verification API from <a href="https://maileroo.com/?r=acfplugin" rel="nofollow ugc">Maileroo</a></li>
<li>Optional: Form fields for Company name, phone number, website and an accept terms checkbox</li>
<li>Optional: Redirect the visitor after a succesful form submission to a “Thank you” page</li>
<li>Optional: Use the plugin’s CSS style-sheet for your forms</li>
<li>Optional: Protect your forms with Cloudflare Turnstile or hCaptcha</li>
<li>Optional: For additional spam protection, you can add a simple and accessible challenge to your form.</li>
</ul>
<p>The plugin is built to keep stuff simple. If you need a complex web form or if you need a form builder, please use one of the form plugins you can find in the WordPress repository. To use the “Block countries” feature we use the IP to Country API from Country.is. They offer a free service and you don’t need an API key.</p>


Ajax Contact Form

An easy to use contact form plugin with multiple inbuilt features to prevent contact form spam.

GDPR Cookieless CAPTCHA for WooCommerce & Forms – captchaapi.eu vs Ajax Contact Form