Back to knowledgebase Knowledgebase

Install a CAPTCHA or Anti-Bot Plugin in WordPress

Spam form entries, fake registrations and automated comment spam are often submitted by bots.

A CAPTCHA or anti-bot plugin can help WordPress tell the difference between a real visitor and an automated request.

  1. Log in to your WordPress admin area.
  2. Go to Plugins > Add New.
  3. Search for CAPTCHA, reCAPTCHA, hCaptcha, Turnstile or anti-spam plugins that work with your form plugin.
  4. Choose a reputable plugin with recent updates and good reviews.
  5. Click Install Now.
  6. Click Activate.
  7. Open the plugin settings.
  8. Follow the plugin instructions to connect it to the CAPTCHA or anti-bot provider.
  9. Add the protection to your forms, login page, registration page or comments as needed.
  10. Test the form while logged out of WordPress.

Some plugins need site keys or API keys from a provider such as Google reCAPTCHA, hCaptcha or Cloudflare Turnstile.

Try not to make forms harder to use than necessary. CAPTCHA tools can sometimes affect accessibility or frustrate genuine visitors, so test the form after enabling protection.

If you already use a contact form plugin, check whether it has built-in anti-spam options before installing another plugin.