Forms Plugin
Spam Protection

CAPTCHA and Spam Protection for Framer Forms

Pick from 5 CAPTCHA options to stop bots from flooding your inbox. Works on any Framer form, including multi-step.

Add CAPTCHA Protection

Full CAPTCHA suite on Scale plan

Framer form with a visible CAPTCHA widget and the Forms Plugin inspector showing the CAPTCHA type dropdown

Every public Framer form is a target for bot submissions. Forms Plugin ships with 5 CAPTCHA options so you can pick the one that fits your site. Google reCAPTCHA v2 and v3, hCaptcha, Cloudflare Turnstile, a numeric CAPTCHA, and a math-based CAPTCHA. Configure it once in Framer, and your form stays clean. Rejected submissions never reach your inbox or CRM.

How It Works

Set Up in
Three Steps

Configured natively in Framer. No code, no external services.

01. Pick your CAPTCHA type

In the Forms Plugin inspector, choose from 5 CAPTCHA options. Each has different tradeoffs on user friction and privacy.

Pick your CAPTCHA type

02. Add your site key

For reCAPTCHA, hCaptcha, or Turnstile, paste your site key from the provider's dashboard. Numeric and math CAPTCHAs need zero external setup.

Add your site key

03. Publish and test

Ship the form. Submissions without a valid CAPTCHA check are rejected before they reach your inbox or CRM.

Publish and test
Key Capabilities

Everything You Need,
Nothing You Don't

Google reCAPTCHA

v2 (checkbox) and v3 (invisible, risk-scored).

hCaptcha

Privacy-first reCAPTCHA alternative.

Cloudflare Turnstile

Free and user-friction-free.

Numeric CAPTCHA

Simple code entry, no third-party account needed.

Math CAPTCHA

Add two numbers, no third-party account needed.

Works everywhere

Every form, including multi-step.

Styled in Framer

CAPTCHA container matches your design natively.

Use Cases

Built for Real Work

Real teams, real forms. Here is how people put this to work.

01Use case

High-traffic contact forms

Stop the steady trickle of spam submissions from crawlers and bot farms.

02Use case

Newsletter signup forms

Prevent bot signups that inflate your list and hurt sender reputation.

03Use case

Lead forms feeding a CRM

Keep HubSpot or Salesforce clean. Bad data pollutes segmentation and lead scoring.

04Use case

GDPR-conscious sites

Use hCaptcha or Turnstile instead of Google's reCAPTCHA to avoid sending user data to Google.

FAQ

Questions, Answered

For minimal user friction, pick Cloudflare Turnstile (free, invisible). For privacy-conscious audiences, pick hCaptcha. For maximum bot detection, pick reCAPTCHA v3. For zero third-party accounts, pick numeric or math CAPTCHA.

Upgrade Your Native
Forms Without Tools

Build advanced, secure forms directly inside Framer. Add powerful fields, built-in protection, and seamless integrations that scale with your projects.

Get this Plugin
Forms Plugin Preview