--- title: "Securing forms on the website" canonical_url: "https://www.speedzone.fi/tuki/en/kb/securing-forms-on-the-website/" post_type: "ht_kb" published: "2024-11-28T10:50:58+00:00" modified: "2025-07-11T11:55:35+00:00" language: "en" author: "silver" taxonomies: ht_kb_category: - name: "WordPress" url: "https://www.speedzone.fi/tuki/en/kb-categories/wordpress-en/" ht_kb_tag: - name: "Cloudflare Turnstile" url: "https://www.speedzone.fi/tuki/en/kb-tags/cloudflare-turnstile/" - name: "Google reCaptcha" url: "https://www.speedzone.fi/tuki/en/kb-tags/google-recaptcha/" - name: "website forms" url: "https://www.speedzone.fi/tuki/en/kb-tags/website-forms/" --- # Securing forms on the website Securing forms on the website is crucial for ensuring security, privacy, and reliability. By securing forms, you not only protect the integrity and security of your website, but you also maintain user trust and comply with legal standards. ## Why is it important to protect all forms on a website? - **Reducing Spam:** Bots can easily fill out unprotected forms, resulting in large amounts of spam being sent from your website to various mailboxes. - **Maintaining Data Accuracy:** Bots can input incorrect data, which interferes with real user data and complicates user management. - **Enhancing Security:** CAPTCHA solutions protect forms from malicious attacks, such as brute-force attacks on login forms, which could lead to account hijacking. - **Saving Server Resources:** Spam attacks consume server resources and can slow down the website, negatively affecting user experience. ## Protecting WordPress Website Forms Securing forms on the website isn’t very complicated, as there are two great solutions available. ### Securing forms on the website solution 2: Cloudflare Turnstile **Step 1** Before protecting forms using Cloudflare Turnstile, create a Cloudflare account or log in to an existing one. Start the account creation process [here](https://www.cloudflare.com/application-services/products/turnstile/) by clicking the “Get started for free” button. Kun tili on valmis, sinut ohjataan Cloudflare-hallintapaneeliin, jossa sinun on navigoitava `Turnstile` hallinta-osioon. [![Securing forms on the website - Before protecting forms using Cloudflare Turnstile, create a Cloudflare account or log in to an existing one.](https://www.speedzone.fi/static/sites/5/ENGturnstile1-1024x522.png)](https://www.speedzone.fi/tuki/?attachment_id=10826) **Step 2** In the Turnstile management section, add a new CAPTCHA widget. [![](https://www.speedzone.fi/static/sites/5/ENGturnstile2-1024x526.png)](https://www.speedzone.fi/tuki/?attachment_id=10827) **Step 3** Give the widget a name. This name is only visible in the Cloudflare dashboard. [![](https://www.speedzone.fi/static/sites/5/ENGturnstile3.png)](https://www.speedzone.fi/tuki/?attachment_id=10828) **Step 4** Specify all the domains allowed to use this widget. **Note:** If you want to set up Turnstile for a subdomain, include the subdomain name in this step. You can add up to 10 (sub)domains to one widget. [![](https://www.speedzone.fi/static/sites/5/ENGturnstile4-1024x772.png)](https://www.speedzone.fi/tuki/?attachment_id=10829) **Step 5** After adding all (sub)domains to the hostnames list, click the `Add` button. [![](https://www.speedzone.fi/static/sites/5/ENGturnstile5-1024x770.png)](https://www.speedzone.fi/tuki/?attachment_id=10830) **Step 6** Review the settings to ensure they’re correct before creating the widget. Leave the `Widget Mode` as “Managed,” which automatically decides whether to display the CAPTCHA based on visitor behavior. [![Securing forms on the website - Review the settings to ensure they’re correct before creating the widget. Leave the Widget Mode as "Managed," which automatically decides whether to display the CAPTCHA based on visitor behavior.](https://www.speedzone.fi/static/sites/5/ENGturnstile6-1024x935.png)](https://www.speedzone.fi/tuki/?attachment_id=10831) **Step 7** Once the widget is created, you’ll see a `Site Key` and `Secret Key` pair. These will be needed in the next step to integrate the widget with your website. You can always access or regenerate these keys in the Cloudflare dashboard. [![](https://www.speedzone.fi/static/sites/5/ENGturnstile7.png)](https://www.speedzone.fi/tuki/?attachment_id=10832) **Step 8** Open the WordPress dashboard and install the [Simple Cloudflare Turnstile](https://wordpress.org/plugins/simple-cloudflare-turnstile/) plugin, then open its settings and input the `Site Key` and `Secret Key` from the previous step. [![Securing forms on the website - Open the WordPress dashboard and install the Simple Cloudflare Turnstile plugin, then open its settings and input the Site Key and Secret Key from the previous step.](https://www.speedzone.fi/static/sites/5/ENGturnstile8.png)](https://www.speedzone.fi/tuki/?attachment_id=10833) **Step 9** Scroll down to select all the forms you wish to protect. You can also protect forms from other plugins in addition to WordPress’s own forms. After making your selections, click `Save Changes`. [![](https://www.speedzone.fi/static/sites/5/ENGturnstile9.png)](https://www.speedzone.fi/tuki/?attachment_id=10834) **Step 10** Click the green `TEST RESPONSE` button that appears on the screen after saving changes. If the test is successful, the CAPTCHA will be activated on the previously selected forms. If it fails, double-check the `Site Key` and `Secret Key`. **Vaihe 10** Klikkaa vihreää `TEST RESPONSE` -painiketta, joka tulee näyttöön muutosten tallentamisen jälkeen. Jos testi onnistuu, CAPTCHA aktivoituu aiemmin valituissa lomakkeissa. Jos se epäonnistuu, tarkista `Site Key` ja `Secret Key`. [![](https://www.speedzone.fi/static/sites/5/ENGturnstile10.png)](https://www.speedzone.fi/tuki/?attachment_id=10835) **Step 11** Test the implementation. WordPress login form: `https://yourdomain.com/wp-login.php` WordPress registration form: `https://yourdomain.com/wp-register.php` You should now see the Cloudflare Turnstile widget displayed on the forms. [![Securing forms on the website - Test the implementation. You should now see the Cloudflare Turnstile widget displayed on the forms.](https://www.speedzone.fi/static/sites/5/ENGturnstile11.png)](https://www.speedzone.fi/tuki/?attachment_id=10836) ### Securing forms on the website solution 2: Google reCaptcha **Step 1** To protect forms with Google reCAPTCHA, log in to the [Google reCAPTCHA dashboard](https://www.google.com/recaptcha/about/). [![Securing forms on the website - To protect forms with Google reCAPTCHA, log in to the Google reCAPTCHA dashboard.](https://www.speedzone.fi/static/sites/5/ENGrecapctha0-1024x557.png)](https://www.speedzone.fi/tuki/?attachment_id=10837) **Step 2** After logging in, you’ll be able to create a new CAPTCHA. Assign a label, such as your domain name. [![](https://www.speedzone.fi/static/sites/5/ENGrecaptcha1.png)](https://www.speedzone.fi/tuki/?attachment_id=10838) **Step 3** Select `Score based (v3)` as the CAPTCHA type. [![](https://www.speedzone.fi/static/sites/5/ENGrecaptcha2.png)](https://www.speedzone.fi/tuki/?attachment_id=10839) **Step 4** Specify the domain name that will use the CAPTCHA. **Note:** Unlike Cloudflare Turnstile, subdomains do not need to be specified separately for Google reCAPTCHA. [![](https://www.speedzone.fi/static/sites/5/ENGrecaptcha3.png)](https://www.speedzone.fi/tuki/?attachment_id=10840) **Step 5** Give a name to the project. [![](https://www.speedzone.fi/static/sites/5/ENGrecaptcha4.png)](https://www.speedzone.fi/tuki/?attachment_id=10841) **Step 6** Read through and agree to the Google reCAPTCHA terms. [![](https://www.speedzone.fi/static/sites/5/ENGrecaptcha5.png)](https://www.speedzone.fi/tuki/?attachment_id=10842) **Step 7** Click `SUBMIT`. [![](https://www.speedzone.fi/static/sites/5/ENGrecaptcha6.png)](https://www.speedzone.fi/tuki/?attachment_id=10843) **Step 8** You’ll see a `Site Key` and `Secret Key` pair on the next screen. These will be used in the next step to integrate reCAPTCHA with your website. You can view these keys anytime in the Google reCAPTCHA dashboard. [![](https://www.speedzone.fi/static/sites/5/ENGrecaptcha7-1024x641.png)](https://www.speedzone.fi/tuki/?attachment_id=10844) **Step 9** Now that the API keys have been made, install a Google reCAPTCHA plugin on your website. In this example. we will be installing and configuring the [Advanced Google reCAPTCHA](https://wordpress.org/plugins/advanced-google-recaptcha/) plugin. Open the plugin settings and select `Google reCAPTCHA v3` as the CAPTCHA type. [![](https://www.speedzone.fi/static/sites/5/ENGrecaptcha10.png)](https://www.speedzone.fi/tuki/?attachment_id=10845) **Step 10** Enter the `Site Key` and `Secret Key` in the respective fields. Click `Verify Captcha` to ensure the keys are correct. [![Securing forms on the website - Enter the Site Key and Secret Key in the respective fields. Click Verify Captcha to ensure the keys are correct.](https://www.speedzone.fi/static/sites/5/ENGrecaptcha11-1-1024x441.png)](https://www.speedzone.fi/tuki/?attachment_id=10846) Click `Submit Captcha` in the popup window to complete the verification. [![](https://www.speedzone.fi/static/sites/5/recaptcha12.png)](https://www.speedzone.fi/tuki/?attachment_id=10847) Captcha is successfully verified.[![](https://www.speedzone.fi/static/sites/5/recaptcha13.png)](https://www.speedzone.fi/tuki/?attachment_id=10848) **Step 11** Click `Save Changes` to save the configuration. [![](https://www.speedzone.fi/static/sites/5/recaptcha14-1024x433.png)](https://www.speedzone.fi/tuki/?attachment_id=10849) **Step 12** Under the `Where To Show` tab, select which forms should be protected by the CAPTCHA. [![Securing forms on the website - Under the Where To Show tab, select which forms should be protected by the CAPTCHA.](https://www.speedzone.fi/static/sites/5/recaptcha16.png)](https://www.speedzone.fi/tuki/?attachment_id=10850) **Step 13** Test the implementation. - WordPress login form: `https://yourdomain.com/wp-login.php` - WordPress registration form: `https://yourdomain.com/wp-register.php` You should see the Google reCAPTCHA logo in the bottom-right corner of the website. [![Securing forms on the website - Test the implementation. You should see the Google reCAPTCHA logo in the bottom-right corner of the website.](https://www.speedzone.fi/static/sites/5/ENGrecaptcha15.png)](https://www.speedzone.fi/tuki/?attachment_id=10851)