Getting Your Captcha Keys

The Spam Protection module acts as a bridge between your store and a security service, or provides a secure, self-hosted internal protection layer. To activate protection, you must choose and configure a provider.

You can choose one of the following providers:

1. Google reCAPTCHA: The industry standard. You can choose between Version 3 (Score-based) or Version 2 (Invisible). Both require a Google account and external registration.
2. hCaptcha: A privacy-focused alternative to Google. It supports invisible verification and enterprise-grade bot protection while respecting user data privacy.
3. ALTCHA (Self-Hosted & GDPR Compliant): A revolutionary, privacy-first solution. Unlike the other options, ALTCHA does not require a third-party account or external registration. It is 100% GDPR compliant and runs entirely on your own server.

Please click on your preferred provider below to see the specific step-by-step setup or registration guide.

How to get Google reCAPTCHA v2 Invisible Keys If you prefer the classic protection method, you can use Version 2 (Invisible). This version works in the background but will show a puzzle (image challenge) if a visitor looks suspicious. 1. Log i... Read more

How to get Google reCAPTCHA v3 Keys Google reCAPTCHA v3 works in the background and assigns a "score" to every visitor. It does not interrupt your customers with puzzles. 1. Log in or Create a Google Account Go to the Google reCAPTC... Read more

How to get hCaptcha Keys Important: You need two different codes: the Site Key and the Secret Key. Depending on whether you are a new or existing user, the process to get them is slightly different. Jump to you... Read more

How to configure ALTCHA (100% GDPR Compliant) ALTCHA is a free, open-source, and privacy-first alternative to traditional Captchas. Instead of analyzing user behavior or asking for image identification, it uses a "Proof of Work" mechanism. The... Read more