hCaptcha is a privacy-focused CAPTCHA service that protects your forms from bots and spam while respecting user privacy. Unlike Google reCAPTCHA, hCaptcha doesn't sell user data or use it for ad targeting, making it a popular choice for privacy-conscious websites and businesses. FormsList integrates with hCaptcha to validate every submission server-side. When enabled, users complete a quick challenge (or pass invisibly with hCaptcha's passive mode), and FormsList verifies the token before accepting the submission. Spam bots are blocked before they ever reach your inbox. hCaptcha is trusted by major companies including Cloudflare, Discord, and Shopify. It offers a free tier for small websites, making it accessible for projects of any size. Combined with FormsList's built-in honeypot protection, hCaptcha provides robust, multi-layered spam defense.
Sign up at hcaptcha.com and create a new site. Copy your site key and secret key from the hCaptcha dashboard.
Include the hCaptcha script and widget div in your form HTML. The widget will render a challenge or work invisibly depending on your configuration.
In the FormsList dashboard, go to your form's Spam Protection settings. Enable hCaptcha and enter your secret key for server-side validation.
FormsList integrates with Google reCAPTCHA to block spam submissions while keeping the experience smooth for real users. reCAPTCHA uses advanced risk analysis and adaptive challenges to distinguish humans from bots, ensuring only legitimate submissions reach your inbox. FormsList supports reCAPTCHA v2 (checkbox and invisible) and reCAPTCHA v3 (score-based, no user interaction). With v3, most users won't see any challenge at all — reCAPTCHA silently scores the submission in the background, and FormsList rejects anything that looks like a bot. Enabling reCAPTCHA on FormsList is simple. Add your reCAPTCHA site key to your form's frontend, include the reCAPTCHA token in your submission, and configure your secret key in the FormsList dashboard. FormsList validates the token server-side and rejects submissions that fail verification.
Learn moreCloudflare Turnstile offers a user-friendly, privacy-focused alternative to traditional CAPTCHAs. Unlike reCAPTCHA, Turnstile never shows visual puzzles or image challenges. It runs silently in the background, validating users through non-intrusive browser challenges that don't track users across the web. FormsList's Turnstile integration gives you the best of both worlds: powerful bot detection without sacrificing user experience or privacy. Turnstile is GDPR-friendly and doesn't use cookies for tracking, making it ideal for European websites and privacy-conscious projects. Setup is straightforward. Get your Turnstile site key and secret key from the Cloudflare dashboard, add the Turnstile widget to your form, and configure the secret key in FormsList. Every submission is validated server-side, ensuring bots can't bypass the protection.
Learn moreSet up your form backend in under a minute. No server required, no complex configuration — just a simple endpoint for your forms.