Settings

The Settings tab is the main control center. Here you choose your security provider, connect your keys, and customize the visual appearance of the protection.

1. Choose Protection (Provider)

Select the security service you want to use. The configuration fields below will update automatically based on your choice.

Option A: Google reCAPTCHA Settings

If you selected Google reCAPTCHA, paste your Site key and Secret key into the fields.

Security Level (Score):
This setting determines how strict the protection is. Google assigns a "score" to every visitor (0.0 is a bot, 1.0 is a human).

• 0.5 (Default): This is the recommended balance. It stops bots but lets humans pass easily.
• 0.9 (Max): Very strict. Only users with "perfect" behavior will pass. This may block legitimate customers using VPNs.
• 0.1 (Min): Very relaxed. Use this only if customers are complaining about errors.

Google reCAPTCHA Configuration

Option B: hCaptcha Settings

If you selected hCaptcha, simply paste your Site key and Secret key into the fields.

hCaptcha Configuration

Option C: ALTCHA Settings (GDPR Compliant)

If you select ALTCHA, you are using a self-hosted, privacy-first solution. To set up ALTCHA, select it as your Captcha Provider in the module settings.

Generating the Secret Key

Since ALTCHA runs on your server, you do not need to register anywhere. You only need a single Secret Key to verify the solutions.

• Simply click the Generate Key button.
• The module will instantly create a secure cryptographic key (HMAC Secret) for you.

Complexity:

This setting determines how difficult the "math problem" is for the visitor's device.

• Minimal: Fastest calculation. Use this if your customers primarily use very old mobile devices.
• Low (Default): Fast calculation. Offers a good balance between security and user experience.
• Medium: Increased difficulty. Recommended if you notice automated bots bypassing the Low setting.
• High: Requires more processing power. Provides high security but may take 10-20 seconds on low-end devices.
• Very High: Maximum security. Only use this if under heavy attack, as it may cause significant delays on mobile phones.

Click the Generate button to create your secure self-hosted ALTCHA Secret Key

2. General Settings

This section controls where the protection is active.

Protected Forms

Check the box next to any form you want to secure. We recommend enabling all of them:

• Contact us: Protects your customer service contact form from spam messages.
• Write a review: Prevents bots from posting fake product reviews or comments.
• Signup for newsletter: Keeps your mailing list clean by blocking automated subscriptions.
• Registration: Critical for stopping bots from creating thousands of fake customer accounts.
• Guest Checkout: Secures the checkout process for customers who shop without creating an account.
• Forgot / Reset password: Prevents bots from triggering mass password reset emails to your users.
• Log in: Protects customer accounts against "brute-force" password guessing attacks.
• Back-in-stock alerts: Protects the email field where customers sign up for "Notify me when available" alerts.

Check for Disposable Emails

Toggle this switch to Enabled if you want to automatically block registrations from known temporary email services (like 10-minute-mail). This helps ensure your customer database remains clean.

Selecting which forms to protect

3. Style Settings

(Applies to Google reCAPTCHA and hCaptcha only)

Since this module uses invisible protection, there are no checkboxes for users to click. However, you must display a small security badge on your site. These settings allow you to customize its appearance.

• Theme: Choose between Light (for bright backgrounds) or Dark (for dark backgrounds).
• Position: Choose where the badge appears on the screen (Bottom right or Bottom left).
• Distance from bottom: Define the vertical gap (in pixels) from the bottom of the screen. Increase this number (e.g., to 80 px) if the badge is covering your "Chat" widget or "Back to Top" button.

Customizing the Security Badge appearance

Save Changes: Once you have finished configuring the settings, click the Save button at the bottom right of the page.