Stop contact form spam with BotShield CAPTCHA for Contact Form 7. This all-in-one anti-spam plugin integrates Google reCAPTCHA (v2 Checkbox & v3 Invisible), Cloudflare Turnstile (privacy-focused), and lightweight built-in Arithmetic/Image CAPTCHA challenges to block bots while letting real users pass.
Whether you need strict security or a friction-free user experience, BotShield gives you complete control over your specific form protection needs. No more spam submissions, fake leads, or automated bot attacks.
Protect Your WooCommerce Store with Enterprise-Grade Security. Upgrade to SecureGate CAPTCHA for ultimate full-site protection. Instantly block spam, fake registrations, and checkout fraud using intelligent Cloudflare Turnstile, Google reCAPTCHA, hCaptcha, and powerful Geo-Blocking rules—keeping your store fast, secure, and entirely bot-free.
Key Features & Benefits
- Multi-Provider Support: Choose between Google reCAPTCHA, Cloudflare Turnstile, or Self-hosted challenges.
- Google reCAPTCHA Integration: Supports both v2 (“I’m not a robot”) and v3 (Invisible) keys.
- Cloudflare Turnstile: The modern, privacy-friendly alternative that stops bots without annoying puzzles.
- Lightweight Built-in Protection: Use simple Math or Image CAPTCHAs without needing any external API keys.
- Seamless Contact Form 7 Integration: Adds a dedicated “BotShield” tag generator button directly to the CF7 editor.
- Mobile Optimized: Fully responsive challenges that work perfectly on smartphones and tablets.
- Privacy-Conscious Options: Built-in challenges keep verification on your server, while Turnstile minimizes user friction.
- Accessibility Ready: WCAG 2.1 compliant designs for screen reader support.
Flexible Protection Options
1. Google reCAPTCHA (The Industry Standard)
* v2 Checkbox: The classic “I’m not a robot” checkbox users trust.
* v3 Invisible: valid users are verified in the background with zero interaction.
2. Cloudflare Turnstile (Privacy-First)
* Verify visitors without solving complex puzzles. Smart, fast, and respectful of user privacy.
3. Built-in Challenges (No Keys Required)
* Arithmetic: Simple math questions (e.g., 7 + 2 = ?) effective against basic bots.
* Alphanumeric: Distorted text images for traditional verification.
* Zero external dependency, 100% self-hosted.
Perfect For
- Contact forms
- Registration forms
- Quote request forms
- Newsletter signups
- Any Contact Form 7 form needing spam protection
Requirements
- WordPress 5.0 or higher
- Contact Form 7 plugin (must be active)
- PHP 7.4 or higher
- GD PHP extension for image CAPTCHAs
Privacy Policy
BotShield CAPTCHA does not store or sell form-user profiles, add tracking cookies, or share information for advertising. Built-in Arithmetic and Alphanumeric challenges are processed on your WordPress server. If you enable Google reCAPTCHA or Cloudflare Turnstile, the browser and server communicate with that provider to verify the challenge; those services are governed by their own privacy policies and terms.
Support & Documentation
- Support Forum: https://wordpress.org/support/plugin/botshield-captcha/
Screenshots

Contact Form 7 tag generator interface for easy CAPTCHA shortcode creation

General Settings - CAPTCHA Type selection

Integration Settings - Provider Configuration

Cloudflare Turnstile CAPTCHA on contact form

Google reCAPTCHA on contact form

Arithmetic CAPTCHA displaying a math challenge on the contact form

Alphanumeric image CAPTCHA showing distorted text characters for security