Petitioner
Get the plugin

Configuring captcha

To protect your petition forms from spam, the Petitioner plugin supports Google reCAPTCHA, hCaptcha, and Cloudflare Turnstile. You can choose either depending on your preference and use case.

Note: do not try to use multiple at the same time

These captcha libraries are not meant to be used together and will cause conflicts if you try.

Which CAPTCHA should I choose?

If you’re unsure which provider to use, here is a quick breakdown to help you decide:

  • Cloudflare Turnstile: Ideal for most websites, especially large organizations. It offers very generous free limits, is highly privacy-focused (no user tracking), and typically provides a frictionless experience without challenging users with image puzzles.
  • Google reCAPTCHA v3: The most popular and proven solution. It works invisibly in the background to score traffic. However, it’s known to track user behavior across sites for its risk analysis, which might be a concern for strict privacy requirements.
  • hCaptcha: A strong privacy-centric alternative to Google. A unique benefit is that website owners can optionally earn rewards when users solve challenges. It is great for privacy-conscious sites but often requires users to solve manual image puzzles more frequently than the others.

Configuring reCaptcha

First of, you will need to get your credentials.

  1. Go to https://www.google.com/recaptcha/admin/create and create a new reCaptcha instance. Add a label and use the v3 version of the captcha.
  2. Add your domain (e.g., example.com)
  3. Accept Terms and click Submit
  4. Copy your Site Key and Secret Key

Now that you have your credentials:

  1. Go to Petitioner → Settings →Integrations. Find Google reCAPTCHA v3 and click “Configure”
  2. Click “Enabled” to enable
  3. Enter your site key and the secret key.
  4. Close the popup and hit “Save Changes”

Configuring hCaptcha

Getting credentials is similar to reCAPTCHA:

  1. Go to: https://www.hcaptcha.com/
  2. Sign in and navigate to the Sites section
  3. Add a new site and domain
  4. Choose the difficulty level
  5. Copy your Site Key and Secret Key

Now lets add them to Petitioner:

  1. Go to Petitioner → Settings →Integrations. Find hCaptcha and click “Configure”
  2. Click “Enabled” to enable
  3. Enter your site key and the secret key.
  4. Close the popup and hit “Save Changes”

Configuring Cloudflare Turnstile

Turnstile is very similar to the above:

  1. Go to Cloudflare Turnstile Dashboard
  2. Navigate to Turnstile → Add site
  3. Add a new site and domain
  4. Choose “Managed” mode
  5. Copy your Site Key and Secret Key

Now lets add them to Petitioner:

  1. Go to Petitioner → Settings →Integrations. Find Cloudflare Turnstile and click “Configure”
  2. Click “Enabled”
  3. Enter your site key and the secret key.
  4. Close the popup and hit “Save Changes”