Which CAPTCHA providers are supported?
Veekay Captcha Shield supports Cloudflare Turnstile, Google reCAPTCHA Enterprise, and hCaptcha.
Cloudflare Turnstile supports Managed, Non-Interactive, and Invisible modes.
Google reCAPTCHA Enterprise supports Score-based, Checkbox, and Invisible modes.
hCaptcha supports Checkbox and Invisible display modes.
Which provider should I use?
The best provider depends on your requirements.
Cloudflare Turnstile supports Managed, Non-Interactive, and Invisible modes, with Managed as the default mode in Veekay Captcha Shield.
Google reCAPTCHA Enterprise supports Score-based, Checkbox, and Invisible modes using Google Cloud reCAPTCHA assessments.
hCaptcha provides Checkbox and Invisible display modes.
You can also use different providers for different forms.
Can I use multiple providers at the same time?
Yes.
You choose one global default provider, but each supported form can use the global default, select a different provider, or disable CAPTCHA.
Only the provider configured for a particular protected form is used for that form.
Does this plugin work without WooCommerce?
Yes.
WooCommerce is optional. WordPress login, registration, lost password, and comment protection remain available when WooCommerce is not installed or active.
Which WooCommerce versions are supported?
WooCommerce 10.1.0 or newer is required for WooCommerce protection.
Does this plugin support WooCommerce Classic Checkout?
Yes.
Veekay Captcha Shield integrates with the traditional WooCommerce Classic Checkout flow and preserves CAPTCHA protection when WooCommerce updates checkout content through AJAX.
Does this plugin support WooCommerce Checkout Block?
Yes.
Veekay Captcha Shield supports WooCommerce Checkout Block using the Store API checkout flow. CAPTCHA token data is passed through WooCommerce checkout extension data and verified server-side before checkout completes.
Classic Checkout and Checkout Block use the same WooCommerce checkout CAPTCHA setting.
Are WooCommerce product reviews the same setting as WordPress comments?
No.
WooCommerce product reviews are independently configurable from WordPress comments.
Does this plugin store submitted CAPTCHA tokens?
No.
CAPTCHA tokens are used for provider verification and are not persisted by Veekay Captcha Shield.
What happens if the CAPTCHA provider cannot be reached?
Protected forms fail closed when required verification cannot be completed.
Visitors receive a plugin-owned message asking them to try again. Raw provider errors and technical responses are not exposed.
Does deactivating the plugin remove my settings?
No.
Deactivating Veekay Captcha Shield preserves its settings, credentials, global default, per-form overrides, and provider configuration.
Does uninstalling the plugin remove my settings?
Yes.
Uninstalling Veekay Captcha Shield permanently removes plugin-owned data, including credentials, global defaults, per-form settings, provider settings, transients, and caches.
Uninstallation does not contact external CAPTCHA providers or revoke credentials stored with those providers.
Does Veekay Captcha Shield use external services?
Yes.
CAPTCHA protection depends on the external provider selected for a protected form.
When a provider is enabled, its official browser-side CAPTCHA service may be loaded on pages containing a protected form. When the form is submitted, CAPTCHA verification data is sent to that provider for server-side verification.
See the External services section below for details.
Where can I find detailed setup instructions?
User documentation is available at:
Veekay Captcha Shield documentation
