Recommended course for Captcha on Joomla

[murphle1965]

I'm curious what captcha solution others are using on their sites. I've always used Google reCaptcha, and am open to suggestions. I've not tried hCaptcha. I see there is a captcha testing thread in the forum, and have looked at that. I don't see where others have any questions on where to go when Google pushes the keys to their cloud platform.

Thanks in advance and have a great day!
Pol.

[gws]

For me HashCash is king.
https://extensions.joomla.org/extension/hashcash/

[Per Yngve Berg]

Defiantly HashCash. Local Solution, no Cloud Platform involved.

[wejom21]

For google captcha it is not mandatory to use Google cloud. This is optional only. you can still get the site key and secret key for the basic not the google cloud.

I'm curious what captcha solution others are using on their sites. I've always used Google reCaptcha, and am open to suggestions. I've not tried hCaptcha. I see there is a captcha testing thread in the forum, and have looked at that. I don't see where others have any questions on where to go when Google pushes the keys to their cloud platform.

Thanks in advance and have a great day!
Pol.

[murphle1965]

So I don't need to migrate the keys over? This is a portion of an email I received from Google regarding the keys:

"We’re writing to inform you that all Google reCAPTCHA keys will need to be migrated to a Google Cloud project by the end of 2025. This will unite all reCAPTCHA customers under a single set of terms, a consistent pricing structure, and provide access to advanced security features.

We’ve provided additional information below to guide you through this change.

What you need to do
We will apply the change in phases throughout the year, reaching out again by email when your keys become eligible. At that time, we will automatically create a Google Cloud project for you and associate your keys to it."

If I can keep them as they are, I'll do that; however, I'm not averse to looking towards another option such as Hash Cash as mentioned previously.

[wejom21]

I used Google ReCAPTCHA and used the basic or non-cloud and it is still working for me. no issues so far.. as long as it was working from my end.. I will not move to others for now.

[murphle1965]

Being as I have several websites to manage, I'm concerned with hanging on until the last minute. The fact that Google's email says "All Google reCaptcha keys will need to be migrated to a Google Cloud project by the end of 2025" has me getting my ducks in a row.

[gws]

Why stick with an inferior product like google when you can use hashcash (free) and never have spam again. I urge you to read the docs on hashcash.

[murphle1965]

I will absolutely look at hash cash.

[murphle1965]

My issue with hashcash is that I use Convert Forms. I'm used to selecting 'recaptcha' and entering the keys in there. They have fields for hCaptcha and Turnstile as well as Google reCaptcha. It's unclear as to whether this will work with Convert Forms. I will reach out to Tassos.

[gws]

I would ask Michael the author of hashcash, I suspect it does work with Convert Forms and if it doesn't I am pretty sure Michael will make sure it does. ps he is stuttering poet on the forums.

[murphle1965]

Good pro tip. Thanks!

[web.dev]

...I use Convert Forms. It's unclear as to whether this will work with Convert Forms. I will reach out to Tassos.

Found this from Nicholas: https://github.com/akeeba/plg_captcha_altcha
Says: "Joomla! plugin to implement ALTCHA, the Open Source, proof-of-work, self-hosted CAPTCHA alternative"

I've tested for a week or so on a Joomla 5 registration that was getting spammed. This was very easy to add and works.

@Tassos please add this to your stack for Convert Forms, Fields and Smile Pack:)

[JAVesey]

Another vote for HashCash

I, too, use Convert Forms; there’s info in the HashCash docs about integrating it and some code. I’ll be looking at integrating with Convert Forms (there’s php/script areas to do this) over the Easter hols. If I manage it I’ll post on here

[murphle1965]

JAVesey, would be thrilled to know if you’re able to get it implemented. I’m not a code warrior, so I hope @Tassos can add it.

Thanks so much (also thanks to web.dev and others on here).

[stutteringp0et]

I don't understand why Tassos didn't configure his extension to utilize the Joomla site configured Captcha. When I get through my backlog of unpublished extensions, I may get in contact with him to see if he's willing to make that an option.

I'm probably 25 extensions away from being caught up.

I think you emailed me about this problem last week. Hi

[Per Yngve Berg]

It should appear in the list when the Plugin is enabled. it's Convert Forms that is off here.

[stutteringp0et]

He built his plugin to work with his 3 supplied captcha fields. I think I understand why he did it - controlling the environment means he can streamline the backend processing.