Features
Spam Protection for WordPress Forms
Block bot submissions with reCAPTCHA and Cloudflare Turnstile — both included, on any form. Free in Auto Form Builder.
What you can do
Enable Google reCAPTCHA in v2 or v3 mode to block automated bot submissions.
Use Cloudflare Turnstile as a privacy-first alternative to traditional CAPTCHAs.
Run either CAPTCHA service on its own or enable both for extra protection.
Turn spam protection on or off per form, so low-risk internal forms stay friction-free.
How it works
- Open the Add-Ons screen and activate reCAPTCHA Protection and/or Cloudflare Turnstile.
- Open that module's Settings and enter your Site Key and Secret Key from the provider.
- Enable protection on the forms that need it — public contact forms, registration forms and high-traffic pages.
- Publish the form; bots are challenged automatically while real visitors submit normally.
Why it matters
Spam submissions waste your time, skew your data and can bury real leads. Built-in reCAPTCHA and Turnstile stop bots before they hit your inbox, so your team focuses on genuine enquiries and your conversion metrics stay trustworthy.
Related features
Related fields
FAQ
Which CAPTCHA should I use?
Either — reCAPTCHA is widely used; Turnstile is more privacy-friendly. You can use both.
Is it free?
Yes — both are built in at no cost.