Advertising sustains the DA. Ads are hidden for members. Join today

Security in Drupal

CAPTCHA module: spam control

Last updated on
16 November 2025

A CAPTCHA is a challenge-response test most often placed within web forms to determine whether the user is human. The purpose of the CAPTCHA module is to block form submissions by spam-bots, which are automated scripts that post spam content everywhere they can. The CAPTCHA module includes several options which allow you to add a challenge to virtually every form on the website.

Installation

The CAPTCHA module can be installed and enabled with the normal instructions in the Installing Modules guide.

Configuration

The CAPTCHA module can be configured under /admin/config/people/captcha.

Permissions

The CAPTCHA module adds two new permissions to the permissions page, which can be accessed by going to admin/people/permissions. The two new permissions are 'administer CAPTCHA settings' and 'skip CAPTCHA'. The 'administer CAPTCHA settings' permission gives the user access to the pages admin/config/people/captcha. The 'Skip CAPTCHA' permission tells Drupal not to show or require a CAPTCHA for the specified role.

Additional CAPTCHA Modules

For more CAPTCHA modules, see https://www.drupal.org/project/captcha/ecosystem.

Help improve this page

Page status: No known problems

You can: