Form protection guide
Your provider account and keys stay under your control. FormDex securely verifies the single-use challenge token before accepting a submission.
Setup checklist
Cloudflare Turnstile is the recommended low-friction option. Google reCAPTCHA v2 checkbox is also supported.
In the provider dashboard, add only the hostname such as example.com. Do not enter https://, a path, or the FormDex endpoint.
The site key is public and belongs in frontend widget markup. The secret key must remain server-side and is used by FormDex for verification.
Open the form’s Settings tab, enable captcha protection, choose the same provider, and paste the matching key pair.
Open the Integrate tab after saving. Copy the updated script, widget markup, and token field exactly as shown.
Submit once from an allowed origin. Confirm the submission appears in FormDex, then keep Test mode disabled for production.
