Advanced protection for Contact Form 7
CF7 Captcha Pro extends Contact Form 7 protection with multiple layers of spam defense and tools for managing the submissions your forms receive. It is designed for sites that need more than a CAPTCHA challenge, combining background validation with lead recovery, stored submission data, exports, integrations, and activity logs.
The plugin works with Google reCAPTCHA V2, Google reCAPTCHA V3, hCaptcha, and Cloudflare Turnstile. These options let you choose the verification provider that fits your forms and audience. Multiple forms can be protected on a single page, and the selected CAPTCHA can be added to a Contact Form 7 form using the shortcode provided in the plugin settings.
Six layers of spam defense
CF7 Captcha Pro adds six additional methods that work alongside CAPTCHA protection:
- Advanced honeypot: Uses invisible trap fields with names that regenerate every 24 hours.
- Time limit validation: Helps block submissions that are completed unusually quickly or remain open for an unusually long time.
- Rate limiting: Caps submissions from an IP address to help prevent flooding and excessive email use.
- Geographic blocking: Lets you whitelist the countries you serve or blacklist known spam regions.
- IP pattern blocking: Supports individual IP addresses, wildcards, CIDR ranges, and entire subnets.
- Word filter: Checks submissions for spam keywords, phishing URLs, and known scam phrases before they reach you.
Recover, store, and use form leads
Lead Recovery captures form data in real time as visitors type, helping retain information from abandoned forms. Submissions can also be stored with metadata including IP address, browser, referrer, and timestamp. Stored data can be exported to CSV, Excel, JSON, or PDF for review and reporting.
For connected workflows, CF7 Captcha Pro supports webhooks to services such as Zapier, Salesforce, Slack, Google Sheets, or a custom API. You can configure multiple webhooks per form, with retry logic included. Mailchimp integration supports list additions, field mapping, tags, and opt-in handling. Twilio integration can send instant submission alerts or automated SMS replies to clients.
Form presentation and activity visibility
CAPTCHA appearance can be adjusted through shortcode options. Choose normal or compact sizing, select light or dark themes where supported, and force a specific language for your audience. The options can be combined to match the form layout.
Submission Insights provides visibility into sender IP, source page, device, and browser details. Comprehensive logging records spam blocks, webhook calls, and integration events, making it easier to review activity and investigate workflow issues.
Installation and setup
- Sign up with the CAPTCHA provider you want to use and obtain its Site Key and Secret Key.
- Install CF7 Captcha Pro in WordPress and enter the provider details in the plugin settings.
- Open the settings page and copy the supplied shortcode.
- Add the shortcode to each Contact Form 7 form that needs protection.
- Configure any required defense methods, storage, exports, or integrations for your workflow.
Only the CAPTCHA service or services you configure and activate are contacted when protected forms are used. Google reCAPTCHA, hCaptcha, and Cloudflare Turnstile each process CAPTCHA verification through their respective services.
