hCaptcha is a privacy-focused CAPTCHA service that protects your forms from bots and spam while respecting user privacy. Unlike Google reCAPTCHA, hCaptcha doesn't sell user data or use it for ad targeting, making it a popular choice for privacy-conscious websites and businesses. FormsList integrates with hCaptcha to validate every submission server-side. When enabled, users complete a quick challenge (or pass invisibly with hCaptcha's passive mode), and FormsList verifies the token before accepting the submission. Spam bots are blocked before they ever reach your inbox. hCaptcha is trusted by major companies including Cloudflare, Discord, and Shopify. It offers a free tier for small websites, making it accessible for projects of any size. Combined with FormsList's built-in honeypot protection, hCaptcha provides robust, multi-layered spam defense.
By Vaibhav Jain · Last updated March 27, 2026
Sign up at hcaptcha.com and create a new site. Copy your site key and secret key from the hCaptcha dashboard.
Include the hCaptcha script and widget div in your form HTML. The widget will render a challenge or work invisibly depending on your configuration.
In the FormsList dashboard, go to your form's Spam Protection settings. Enable hCaptcha and enter your secret key for server-side validation.
hCaptcha is independently operated and doesn't use submission data for advertising purposes. It's a popular choice for websites that prioritize user privacy, comply with GDPR, or prefer not to use Google services.
hCaptcha offers a free tier that supports up to 1 million requests per month, which is sufficient for most websites. Paid plans are available for higher volumes and advanced features.
Yes. You can change your CAPTCHA provider at any time in the FormsList dashboard. Simply disable one and enable the other in your form's Spam Protection settings. Remember to update the widget on your frontend form as well.
200 free submissions a month and a live endpoint in 30 seconds. No server, no credit card, just point your form at it.