Add hCaptcha to your forms

Before you start

You need WConvert Free or Pro, a published signup form and your own hCaptcha account with standard site and secret keys. Register the hostname shown by WConvert with the provider. Have a test email address you control ready.

This is a site-wide setting: it changes verification for every WConvert form. Choose a quiet time to save and test it. Existing built-in spam checks continue to apply.

Save your hCaptcha keys

1. Open WConvert → Settings → Spam protection.
2. Under Bot verification, choose hCaptcha.
3. Check the displayed hostname. Use Get keys to open the provider if you still need keys.
4. Enter the matching Site key and Secret key. Keep the secret private.
5. Choose Save spam protection.

Once saved, the secret field shows Saved — leave empty to keep. You can leave it empty when saving other settings for the same provider. Switching providers clears the key inputs; supply the new provider’s matching pair.

Explain the use of hCaptcha in your site’s privacy information. The verification provider receives browser and network data, not the form answers. See WConvert’s privacy guidance for the settings to review.

Test the saved setup

1. Choose Test saved setup. If you have unsaved changes, save or cancel them first.
2. Complete the check in Verify your submission.
3. Look for Test passed. No lead created or messages sent.

Enlarge screenshot

Saved hCaptcha setup with a successful verification test

Zoom in

Zoom to inspect the controls. Press Escape to close.

This test checks the saved provider setup. It does not create a lead, send an email or prove that a campaign’s live form and destination work.

Test a published form

1. Open the campaign’s published page in a fresh, logged-out browser session.
2. Enter your test details, select any required consent and submit.
3. Complete verification. Confirm that the form reaches its success message.
4. Open WConvert → Leads and find the new submission. If the form uses a destination, check that service or mailbox separately.
5. Repeat with a different test address and choose Cancel verification. The form should stay open with a cancellation message and no new lead for that address. Submit again to retry.

If verification does not work

To remove the external check, choose Built-in checks only and save. Built-in checks and any configured email filters remain. Retest a published form after changing providers or disabling verification.