FormsList integrates with Google reCAPTCHA to block spam submissions while keeping the experience smooth for real users. reCAPTCHA uses advanced risk analysis and adaptive challenges to distinguish humans from bots, ensuring only legitimate submissions reach your inbox. FormsList supports reCAPTCHA v2 (checkbox and invisible) and reCAPTCHA v3 (score-based, no user interaction). With v3, most users won't see any challenge at all — reCAPTCHA silently scores the submission in the background, and FormsList rejects anything that looks like a bot. Enabling reCAPTCHA on FormsList is simple. Add your reCAPTCHA site key to your form's frontend, include the reCAPTCHA token in your submission, and configure your secret key in the FormsList dashboard. FormsList validates the token server-side and rejects submissions that fail verification.
Visit the Google reCAPTCHA admin console (g.co/recaptcha) and register your site. Choose v2 or v3 and copy your site key and secret key.
Add the reCAPTCHA script and widget to your form's HTML or use a framework-specific reCAPTCHA component. The token will be included automatically in form submissions.
In the FormsList dashboard, go to your form's Spam Protection settings. Enable reCAPTCHA and enter your secret key. FormsList will validate tokens server-side.
Cloudflare Turnstile offers a user-friendly, privacy-focused alternative to traditional CAPTCHAs. Unlike reCAPTCHA, Turnstile never shows visual puzzles or image challenges. It runs silently in the background, validating users through non-intrusive browser challenges that don't track users across the web. FormsList's Turnstile integration gives you the best of both worlds: powerful bot detection without sacrificing user experience or privacy. Turnstile is GDPR-friendly and doesn't use cookies for tracking, making it ideal for European websites and privacy-conscious projects. Setup is straightforward. Get your Turnstile site key and secret key from the Cloudflare dashboard, add the Turnstile widget to your form, and configure the secret key in FormsList. Every submission is validated server-side, ensuring bots can't bypass the protection.
Learn morehCaptcha is a privacy-focused CAPTCHA service that protects your forms from bots and spam while respecting user privacy. Unlike Google reCAPTCHA, hCaptcha doesn't sell user data or use it for ad targeting, making it a popular choice for privacy-conscious websites and businesses. FormsList integrates with hCaptcha to validate every submission server-side. When enabled, users complete a quick challenge (or pass invisibly with hCaptcha's passive mode), and FormsList verifies the token before accepting the submission. Spam bots are blocked before they ever reach your inbox. hCaptcha is trusted by major companies including Cloudflare, Discord, and Shopify. It offers a free tier for small websites, making it accessible for projects of any size. Combined with FormsList's built-in honeypot protection, hCaptcha provides robust, multi-layered spam defense.
Learn moreSet up your form backend in under a minute. No server required, no complex configuration — just a simple endpoint for your forms.