Codenitive CAPTCHA Security

Usage

After activating the plugin:

1. 01Go to Settings → Codenitive CAPTCHA Security .
2. 02Select your preferred CAPTCHA provider.
3. 03Enter the Site Key and Secret Key for the selected provider.
4. 04Configure additional provider settings if required.
5. 05Open the Options tab and enable protection for the desired forms.
6. 06Save your settings.

To disable CAPTCHA protection completely, select Disabled as the CAPTCHA provider.

WPForms

When WPForms is installed and active:

1. 07Open Settings → Codenitive CAPTCHA Security → Options .
2. 08Enable WPForms .
3. 09Save the settings.

CAPTCHA is then added automatically before the submit button on WPForms forms. You do not need to add a WPForms CAPTCHA field manually. WPForms submissions are verified server-side using the currently selected Codenitive CAPTCHA provider.

Google reCAPTCHA v2 Customization

When Google reCAPTCHA v2 is selected, the checkbox widget supports:

Theme

• Light (default)
• Dark

Size

• Normal (default)
• Compact

These options apply only to the visible reCAPTCHA v2 checkbox. reCAPTCHA v3 is score-based and has no checkbox theme or size setting.

Cloudflare Turnstile Customization

When Cloudflare Turnstile is selected as the CAPTCHA provider, the following widget customization options are available:

Widget Mode

• Managed (recommended)
• Non-Interactive
• Invisible

The widget mode is bound to the Turnstile Site Key in Cloudflare. Select the same mode in the plugin so it can apply compatible presentation settings. The plugin does not send an unsupported mode value to the browser API.

Theme

• Auto
• Light
• Dark

Appearance

• Always
• Execute
• Interaction-only

Size

• Normal
• Compact
• Flexible

Theme, appearance and size apply to Managed and Non-Interactive widgets. Invisible widgets have no visual footprint, so those display settings are omitted when Invisible mode is selected.

CAPTCHA Verification Logs

The plugin can record failed CAPTCHA verification attempts to help administrators troubleshoot CAPTCHA configuration and verification issues.

Verification logs may include information such as:

• CAPTCHA provider
• Protected form or integration
• Verification result
• Provider error codes
• Date and time of the failed verification

Logs are intended for troubleshooting and monitoring CAPTCHA verification failures.

Privacy

This plugin connects to external CAPTCHA services to help prevent spam and automated abuse.

Data is sent to the currently selected CAPTCHA provider when CAPTCHA protection is used on a protected form.

Supported external services:

• Google reCAPTCHA
• Cloudflare Turnstile

If CAPTCHA is disabled, the plugin does not load or perform CAPTCHA verification through these providers.

External Services Used

This plugin uses one of the following third-party services depending on the CAPTCHA provider selected by the site administrator.

Google reCAPTCHA v2

• Purpose: Helps prevent spam and automated abuse during protected form submissions.
• Data Sent: Browser and interaction information may be sent to Google as part of the CAPTCHA verification process.
• When Sent: When Google reCAPTCHA is selected and a visitor interacts with a protected form.
• Service Provider: Google LLC
• Terms of Service: https://policies.google.com/terms
• Privacy Policy: https://policies.google.com/privacy

Google reCAPTCHA v3

• Purpose: Provides score-based protection against spam and automated abuse without displaying a checkbox challenge.
• Data Sent: Browser, interaction and form-action information may be sent to Google as part of CAPTCHA scoring and verification.
• When Sent: When Google reCAPTCHA v3 is selected and a visitor submits a protected form.
• Service Provider: Google LLC
• Terms of Service: https://policies.google.com/terms
• Privacy Policy: https://policies.google.com/privacy

Cloudflare Turnstile

• Purpose: Helps prevent spam and automated abuse on protected forms.
• Data Sent: Browser, network and other information required by the Turnstile verification service may be sent to Cloudflare.
• When Sent: When Cloudflare Turnstile is selected and CAPTCHA protection is used on a protected form.
• Service Provider: Cloudflare, Inc.
• Terms of Service: https://www.cloudflare.com/website-terms/
• Privacy Policy: https://www.cloudflare.com/privacypolicy/

If Invisible Turnstile mode is used, review Cloudflare’s Turnstile Privacy Addendum and reference it in your site’s privacy policy as required by Cloudflare: https://www.cloudflare.com/turnstile-privacy-policy/

Feedback

If you like this plugin, please leave us a 5-star review: https://wordpress.org/support/plugin/codenitive-captcha/reviews/#new-post

Need help or have a feature request? Use the Support Forum: https://wordpress.org/support/plugin/codenitive-captcha/