WordPress plugin

Stop form spam on WordPress
without tracking your visitors

One checkbox. No traffic lights, no crosswalks, no bicycles — and no cookies, fingerprinting or profiling of the people filling in your forms.

Free plan available · WordPress 5.8+ · PHP 7.4+

What it protects

Contact Form 7

Detected automatically — the checkbox is added to your forms for you.

Comment form

Blocks the comment spam that gets past WordPress's own filters.

User registration

Stops automated sign-ups creating junk accounts.

Lost password

Prevents password-reset flooding.

Login form

Optional, and off by default so a mistake can never lock you out.

Anything else

Drop the [captchatool] shortcode inside any form.

Set up in about a minute

  1. 1 Download the plugin and upload it under Plugins → Add New → Upload Plugin.
  2. 2 Create a free CaptchaTool account and register your website.
  3. 3 Paste your site key into Settings → CaptchaTool. That's it.

Register the same address your site actually serves — example.com and www.example.com count as different sites. The plugin shows you which one it will use.

Why not reCAPTCHA?

No visitor tracking

We don't set cookies on your visitors, fingerprint their device, or build profiles across sites.

No puzzles

Nobody has to identify a fire hydrant. One checkbox, verified in well under a second.

Nothing to configure

Sensible defaults, and the plugin never blocks anything until you've added a key.

Ready to stop the spam?

Free to start, no card required.