Google reCAPTCHA helps stop spam bots submitting your forms.
Step 1: Get keys
- Go to google.com/recaptcha/admin and register your site.
- Choose the reCAPTCHA type your form plugin supports (v2 "I'm not a robot" checkbox or v3).
- Add your domain(s) and submit to get a site key and secret key.
Step 2: Add them to your form plugin
- Contact Form 7: Contact › Integration › reCAPTCHA › Setup Integration, paste both keys and save. (Contact Form 7 uses v3.)
- WPForms, Gravity Forms, Fluent Forms: look in the plugin's settings under CAPTCHA or Integrations.
Protecting the login page
Security plugins such as Wordfence or dedicated reCAPTCHA plugins can add a challenge to wp-login.php as well.
Alternatives that don't need Google include Cloudflare Turnstile and honeypot fields, which many form plugins support.
