Spam Protection
Keep unwanted submissions out of your inbox
Overview
Static Forms supports multiple layers of spam protection:
reCAPTCHA
Google's popular CAPTCHA service. Free and widely trusted.
- ✅ Industry standard
- ✅ Multiple versions (v2, v3)
- ⚠️ Requires Google account
Cloudflare Turnstile
Cloudflare's low-friction CAPTCHA alternative with minimal visual challenges.
- ✅ Privacy-friendly alternative
- ✅ Minimal user interruption
- ✅ No Google dependency
hCaptcha
NEWPrivacy-friendly CAPTCHA with free tier for most sites.
- ✅ Privacy-friendly
- ✅ Free for most sites
- ✅ Checkbox & invisible modes
ALTCHA
NEWPrivacy-first CAPTCHA alternative. No tracking or external dependencies.
- ✅ Privacy-focused
- ✅ No external accounts needed
- ✅ Better user experience
Paid plans: Pro and Advanced accounts can choose between reCAPTCHA v3, Cloudflare Turnstile, hCaptcha, and ALTCHA. Free accounts can use reCAPTCHA v2 and honeypot fields.
Cloudflare Turnstile Setup
Pro FeatureCloudflare Turnstile is a strong fit when you want modern bot protection without depending on Google scripts or image challenges.
- Create a Cloudflare Turnstile widget in Cloudflare and copy your site key and secret key.
- Save the secret key in Settings → CAPTCHA.
- Add the Cloudflare Turnstile widget to your form HTML using your site key.
- Submit the token as
cf-turnstile-response.
hCaptcha Setup
Pro FeaturehCaptcha is a privacy-friendly CAPTCHA that works as a drop-in alternative to reCAPTCHA, with a free tier for most sites and no Google dependency.
- Create a free account at hcaptcha.com and register your site.
- Save the secret key in Settings → CAPTCHA.
- Add the hCaptcha widget to your form HTML using your site key.
- Submit the token as
h-captcha-response.
ALTCHA Setup
RecommendedALTCHA is a privacy-first, self-hosted CAPTCHA alternative that doesn't require any external accounts or API keys.
Step 1: Enable ALTCHA in Dashboard
- Go to your CAPTCHA settings
- Enable ALTCHA protection
- Save your settings
Step 2: Add ALTCHA to Your Form
💡 Learn More: Check out our detailed guides on implementing ALTCHA:
reCAPTCHA Setup
Google reCAPTCHA is a widely-used CAPTCHA service that protects your forms from automated spam. Static Forms supports both reCAPTCHA v2 (checkbox) and v3 (invisible - Pro only).
Pro Feature: reCAPTCHA v3 is available exclusively for Pro users. It provides invisible protection with score-based verification, eliminating the need for user interaction.
Step 1: Get reCAPTCHA Keys
- Visit Google reCAPTCHA Admin
- Register your site and get your Site Key (for HTML) and Secret Key (for Static Forms)
- Important: Make sure to add your domain to the domain list in the reCAPTCHA admin console
- Choose your version:
- v2 Checkbox: User clicks "I'm not a robot" (All tiers)
- v3 Invisible: Score-based verification, no user interaction (Pro only)
Step 2: Configure in Dashboard
- Go to your CAPTCHA settings
- Select the reCAPTCHA tab
- Choose your version (v2 or v3 for Pro)
- Enter your Secret Key (not the Site Key)
- Save your settings
Step 3: Add reCAPTCHA to Your Form
For reCAPTCHA v2 (Checkbox):
For reCAPTCHA v3 (Invisible - Pro Only):
Which Should You Choose?
| Feature | ALTCHA | Cloudflare Turnstile | hCaptcha | reCAPTCHA |
|---|---|---|---|---|
| Setup Difficulty | Easy | Easy | Easy | Moderate |
| External Account Required | No | No | Yes (hCaptcha) | Yes (Google) |
| Privacy | Excellent | Very Good | Very Good | Good |
| User Experience | Smooth | Very smooth | Good | Can be intrusive |
| Effectiveness | Excellent | Excellent | Excellent | Excellent |
🎯 Recommendation: We recommend Cloudflare Turnstile for a balanced default experience and ALTCHA for teams with stronger privacy requirements.