Frequently Asked Questions About CAPTCHA
Spam bots target every form on a store — registration, contact, checkout. This FAQ gathers what PrestaShop merchants ask most about the CAPTCHA module, from choosing a challenge type to covering the right forms, with clear answers drawn from real customer conversations.
Spam bots target every form on a store — registration, contact, checkout. This FAQ gathers what PrestaShop merchants ask most about the CAPTCHA module, from choosing a challenge type to covering the right forms, with clear answers drawn from real customer conversations.
Group 1: Compatibility & requirements
Q: Which PrestaShop versions does the CAPTCHA module support?
A: Our team has explicitly confirmed compatibility with PrestaShop 8.2.1, and customers are actively running the module on 8.2.6/8.2.7, 9.0.1 and 9.1.x. For versions above 9.1.x, we recommend asking our team to confirm the module has been tested on your exact version before purchasing.
Q: Does the module work with third-party themes (e.g. Warehouse, Deo, Hummingbird, AngarTheme)?
A: The module protects PrestaShop's standard forms, so it works with most themes out of the box, but some themes required extra work: customers reported integration difficulties on Hummingbird and AngarTheme, while Warehouse 4.7.2 works on the native contact page. If you use a heavily customized theme, ask our team to check your setup after purchase — our support includes help adapting the module to your theme.
Q: Will the CAPTCHA module work with One Page Checkout?
A: Yes. One Page Checkout has its own separate built-in CAPTCHA configuration, so the two modules do not share settings. Our team can help you protect the standard customer registration form with the CAPTCHA module while keeping your One Page Checkout configuration intact.
Q: Is the CAPTCHA module compatible with a multi-vendor marketplace setup?
A: Yes, the module can protect supported standard PrestaShop forms in a multi-vendor store. However, marketplace-specific forms, such as seller registration, are not automatically covered and may require custom integration.
Q: Can I install the module on a test/staging shop before going live?
A: Yes, you can test the module on a staging site before using it on your live store. Please contact our support team to confirm the licensing conditions for your staging environment.
Q: Does installing the CAPTCHA module conflict with other modules' overrides?
A: It can. The module manages a contact-form override, which can conflict with existing overrides — for example, one customer's installation failed because the override clashed with a GDPR consent module's override. If an override conflict occurs after installation, our team will investigate and resolve it, including checking whether the contact-form override can be omitted while keeping registration protection.
Q: I already use another reCAPTCHA module — can I switch to this one?
A: Yes. One customer switched from a previous reCAPTCHA module that no longer stopped fake account creations; the override conflicts were simple to resolve after removing the old module, and after enabling our module with Cloudflare Turnstile the fake-account registrations stopped within hours.
Group 2: CAPTCHA methods & providers
Q: Which CAPTCHA methods does the module support?
A: Three families: (1) built-in captcha images generated by a PHP library, with different difficulty levels — no third-party API required; (2) Google reCAPTCHA — v2 (Legacy), v3, and reCAPTCHA Enterprise (checkbox and score-based); (3) Cloudflare Turnstile, added in a recent update, enabled by entering your Site Key and Secret Key.
Q: Do I need my own Google or Cloudflare keys?
A: Yes for Google reCAPTCHA and Cloudflare Turnstile. The keys come from Google Cloud Console (reCAPTCHA) or your Cloudflare dashboard (Turnstile) — not from PrestaHero. If you choose the module's built-in captcha images instead, no external keys are needed at all.
Q: Is setting up Google reCAPTCHA complicated?
A: It can feel complex: you create a Google Cloud Console account, create a project, enable the reCAPTCHA APIs and generate keys — one customer described it as taking several hours even though they are tech-savvy. These steps are requirements from Google itself, not from our module. We provide step-by-step instructions, and our support team will guide you through the configuration.
Q: Is there a free version of this module?
A: Yes. PrestaHero offers "reCAPTCHA Free" — a free module that protects the contact, login and registration forms with Google reCAPTCHA v2 and v3 (compatible with PrestaShop 1.6.x – 8.x). The paid CAPTCHA module adds Cloudflare Turnstile, reCAPTCHA Enterprise, built-in captcha images, IP/email blacklists and protection for more forms.
Q: Does Cloudflare Turnstile require my customers to solve puzzles or click checkboxes?
A: No. Turnstile is a lightweight, privacy-focused service that validates visitors automatically in the background using non-intrusive checks, reducing friction for real users. You can run it alongside the existing CAPTCHA and reCAPTCHA methods.
Q: Which Turnstile widget modes are supported, and which should I choose?
A: The module supports Turnstile's Managed and Invisible widget modes. Note from a real customer case: Managed mode worked correctly for customer login/authentication, while switching to Invisible mode caused unreliable logins. We recommend testing your chosen mode on a test shop before enabling it for all visitors.
Group 3: Which forms are protected
Q: Which forms does the CAPTCHA module protect?
A: The module can be enabled on the user registration form, contact form, login form, newsletter subscription form, forgot password form and out-of-product alert form — you choose which forms to protect in the module settings.
Q: Why is there no visible CAPTCHA on my registration form — is protection actually working?
A: It usually is. With reCAPTCHA v3, reCAPTCHA Enterprise (score-based) or Turnstile's Invisible mode, verification happens entirely in the background — no checkbox, image or number puzzle appears. A visible challenge only shows when the service flags a visitor as suspicious. If you are testing and accounts can be created without any visible challenge, that is the expected behavior of invisible verification.
Q: Does the module protect AJAX/popup registration forms (e.g. from page-builder themes like Deo)?
A: The module supports standard PrestaShop registration forms. AJAX or popup registration forms created by custom themes may require additional integration. Our support team can check compatibility with your specific theme.
Q: Does the module work on contact forms embedded in CMS pages via page builders?
A: The module works on the native PrestaShop contact page, but a customer found it did not load on a contact form embedded into a CMS page through a page builder (Creative Elements). If your contact form is built with a page builder, ask our team to verify support for your exact setup.
Q: Can the module protect the out-of-stock product alert (mail subscription) form?
A: Yes, it can be enabled on the out-of-product alert form. If enabling it there produces an "Invalid reCAPTCHA" error that blocks submission, the cause is almost always a Google Cloud Console misconfiguration (see Group 5), not a limitation of the module.
Q: Can the module protect the product comments/review form?
A: Product review forms are not protected by default. The module focuses on six supported PrestaShop forms. Protecting product reviews would require additional integration.
Group 4: Spam & fake-account effectiveness
Q: Will this module stop bots from creating fake customer accounts?
A: Yes — that is one of its main purposes. After enabling the module with Cloudflare Turnstile, one customer confirmed that fake account creations that their previous reCAPTCHA solution could not stop were halted within hours.
Q: Does the module also stop spam on the contact form?
A: Yes. Spam messages through the contact form were the original problem this module solves — the module was built for exactly that, alongside fake registrations and newsletter spam.
Q: Does the module protect against fraudulent orders?
A: The module helps prevent bot registrations and form spam, but it is not a dedicated anti-fraud solution for orders or payments. We recommend using payment fraud protection tools for fraudulent transaction prevention.
Q: What are the IP blacklist and email blacklist for?
A: They are extra security layers beyond CAPTCHA verification. The IP blacklist blocks a specific IP or IP ranges (using IP patterns), and the email blacklist blocks a specific email or similar addresses (using email patterns) — for example, you can block all emails from certain domains like mail.ru or qq.com from submitting your forms.
Group 5: Installation & configuration
Q: Is the module difficult to install? Do I need coding skills?
A: No coding is needed. The module advertises 1-click installation — unlike free captcha modules that require manual copying/editing of Smarty and PHP files. The more time-consuming part is obtaining and entering your Google Cloud Console keys if you use Google reCAPTCHA; our team assists with that.
Q: I get an "Invalid reCAPTCHA" error or reCAPTCHA Enterprise doesn't work — how do I fix it?
A: This is almost always a Google Cloud Console configuration issue, not a module bug. Our team's standard fix: (1) in the API key configuration, set Application restrictions to "None" — no domain/website restriction; (2) do NOT enable the WAF option when generating the key unless your site uses Google Cloud Armor. After saving, clear your PrestaShop cache and browser cache, then test again.
Q: Why does Invisible CAPTCHA not work at all on my store?
A: The most common cause: your Google API key is restricted to "HTTP referrers / Websites". The module also calls the reCAPTCHA API from the server backend via PHP cURL, which Google may block under that restriction. Change the key's Application restrictions to "None" (no domain restriction), save, and test again. If it still fails, contact our team with your PrestaShop version and theme.
Q: The Turnstile widget shows only a "Security check" label and the form fails validation — what is wrong?
A: A customer on PrestaShop 9.1.x saw exactly this on the newsletter form with reCAPTCHA v2 (Legacy): the widget did not render correctly on the homepage and product pages, causing validation errors despite no visible challenge. This points to a rendering/compatibility issue — contact our team with your PrestaShop version and theme so we can investigate.
Q: Can I control how/where the Turnstile widget is displayed on my theme?
A: The module automatically integrates Turnstile into supported forms. Custom widget placement may require theme template adjustments. Our support team can help review your theme's requirements.
Group 6: Pricing, license & policies
Q: How much does the CAPTCHA module cost?
A: The module's listed price is €89.99 on PrestaHero.com. Prices may differ on the PrestaShop Addons Marketplace, so please check the respective product page for current pricing.
Q: Can I get a refund or swap the module if it does not fit my project?
A: Our priority is to help you get the most out of our module. If you encounter technical issues, our support team will investigate and help resolve them, including checking directly on your website when necessary.
If the issue is caused by our module and our developers cannot fix it after troubleshooting, you are eligible for a refund within 15 days of purchase, in accordance with our refund policy.
As our products are downloadable digital software, refunds for a change of mind or features outside the module's advertised scope are not covered. However, we're happy to discuss alternative solutions, such as exchanging the module or offering store credit, depending on your situation.
Q: What is the difference between buying on prestahero.com vs the Addons marketplace?
A: Both platforms offer the same module and core features. Pricing, payment methods, refund conditions, support arrangements, and update delivery may differ depending on the platform. Please check the terms before purchasing.
Q: Can I try CAPTCHA Pro before buying?
A: As CAPTCHA Pro is a downloadable digital product, we do not offer a free trial. However, you can explore our Front Office and Back Office demos, which showcase the module's features, captcha types and protection settings, and configuration options, helping you evaluate whether it meets your needs before purchasing.
If you have any questions about compatibility or specific features, our support team is happy to assist. After purchase, we'll also help with installation, configuration, and troubleshooting to ensure a smooth experience.
Q: If my technical support period expires, can I still get help with a bug?
A: Yes, you can contact our support team. However, dedicated technical assistance after the one-year support period may require renewal. Our team can provide the applicable renewal details.