gaya / typo3-hcaptcha
TYPO3 Extension to add hCaptcha to EXT:form - The privacy friendly captcha alternative.
Package info
github.com/agence-gaya/typo3-hcaptcha
Type:typo3-cms-extension
pkg:composer/gaya/typo3-hcaptcha
Requires
- php: ^8.2
- ext-json: *
- typo3/cms-extbase: ^14.3
- typo3/cms-fluid: ^14.3
- typo3/cms-form: ^14.3
Requires (Dev)
- gaya/typo3-coder: dev-master
- typo3/cms-fluid-styled-content: ^14.3
- typo3/cms-install: ^14.3
Suggests
- helhum/dotenv-connector: ^3.0
Provides
None
Conflicts
None
Replaces
This package is auto-updated.
Last update: 2026-09-22 23:43:08 UTC
README
TYPO3 Extension to add hCaptcha to EXT:form - The privacy friendly captcha alternative.
Provides hCaptcha integration for TYPO3 EXT:form.
hCaptcha is a free to use alternative to Google reCaptcha with a bigger focus on privacy. It supports initiatives like PrivacyPass.
For more information, see the hCaptcha website.
Additionally, hCaptcha provides earnings for solved captchas - that can be donated to the Wikimedia foundation automatically (which is the case for the default settings of this extension).
This extension is a fork of dreistromland/typo3-hcaptcha and previously waldhacker/hcaptcha.
Quick Setup
hCaptcha is configured with a default key to make the setup as easy as possible. It is recommended to create a custom account for your site with hCaptcha and add your own keys.
- Install the extension and activate it
- Include the static template in TypoScript
- Add a
hCaptchaelement to a form
TypoScript Constants
Set the following constants if you are using your own account:
plugin.tx_hcaptcha {
settings {
publicKey = <your-public-key>
privateKey = <your-private-key>
}
}
Environment variables
As an alternative to the TypoScript configuration, you can also use environment variables:
HCAPTCHA_PUBLIC_KEYHCAPTCHA_PRIVATE_KEY
Content Security Policy
If you are using CSP, make sure to adjust them accordingly:
- script-src should include
https://hcaptcha.com, https://*.hcaptcha.com - frame-src should include
https://hcaptcha.com, https://*.hcaptcha.com - style-src should include
https://hcaptcha.com, https://*
Privacy
Make sure to inform your users of your usage of hCaptcha and what that means - especially if you are using the invisible Enterprise version.
For more info see: https://docs.hcaptcha.com/faq