CaptchaKit

CaptchaKit protects your WordPress site from bots, spam, and credential-stuffing attacks — without subjecting real visitors to blurry fire-hydrant photographs.

Instead of a CAPTCHA, visitors play a quick 10-second mini-game (Connect 4, Pac-Man, or Whack-a-Bot). Real humans breeze through it. Bots can’t pass automated checks against the CaptchaKit API.

How it works

1. The CaptchaKit widget is injected into the forms you choose (login, registration, comments, WooCommerce checkout).
2. A visitor completes the mini-game.
3. A signed completion token is placed in a hidden form field by our JavaScript.
4. WordPress sends the token to the CaptchaKit API for server-side verification before allowing the form submission through.

Supported forms

• WordPress Login — protects wp-login.php against brute-force and credential-stuffing bots.
• WordPress Registration — stops automated account creation at the source.
• Comment forms — eliminates comment spam without annoying logged-in users (moderators are always trusted).
• WooCommerce Checkout — prevents fake order submissions and account abuse on your store.

Games available

• Connect 4 — drop discs, get four in a row.
• Pac-Man — eat the dots, dodge the ghosts.
• Whack-a-Bot — bonk the bots before they escape.
• Color Match — match the colors before time runs out.
• Maze Runner — navigate the maze to the exit.
• Fruit Sorter — sort the fruit into the correct bins.
• Stack It — stack the blocks without toppling.

Privacy

CaptchaKit does not store personally identifiable information. The widget communicates with captchakit.com only to verify game tokens. See our privacy policy for full details.

Free to get started

Create a free account and get your Site Key and API Key instantly.