CAPTCHA is important because it blocks bots from spamming your forms, overloading your server, and flooding your inbox with junk submissions. It protects your website, keeps your data clean, and ensures real users can use your forms without issues. In short, CAPTCHA is a simple layer of security that prevents automated abuse.
Here’s a step-by-step guide showing exactly how to add reCAPTCHA v2 or v3 to a WordPress site using Gravity Forms. Gravity Forms includes built-in support for Google reCAPTCHA.
Step 1 - Get your reCAPTCHA keys
- Go to Google's reCAPTCHA admin page:
https://www.google.com/recaptcha/admin/create - Log into your Google account.
- Create a new site.
- Choose your type:
- reCAPTCHA v2 → with "I'm not a robot" checkbox
- reCAPTCHA v2 Invisible
- reCAPTCHA v3 (Score-based, no checkbox)
- Add your domain (example: yourdomain.com)
- Accept terms and submit.
- Google will give you two keys:
- Site Key
- Secret Key
Keep these ready.
Step 2 - Add the keys to Gravity Forms
- In WordPress, go to:
Forms → Settings → reCAPTCHA - Select your reCAPTCHA type (v2 or v3).
- Paste in your:
- Site Key
- Secret Key
- Save.
Step 3 - Add the CAPTCHA field to your form
For reCAPTCHA v2:
- Edit your form.
- Open Advanced Fields.
- Click CAPTCHA.
- It will automatically load your reCAPTCHA box.
For v3:
- No field appears in the form - Gravity Forms runs it in the background.
Testing Your CAPTCHA
After adding CAPTCHA:
- Open your form in an incognito window.
- Submit it without solving the CAPTCHA - it should fail.
- Solve it properly - it should submit.
Common Problems & Fixes
CAPTCHA not showing up
- Clear caching plugin
- Make sure the domain matches the domain you registered
"Invalid domain for site key"
- Re-add your exact domain
(example.com is different from www.example.com)