The best Drupal CAPTCHA modules

On most websites there are some kind of forms that require the submission of data. Be it the simple contact form or the commenting functionality for blog entries or other content types. If so you will need a way to protect these forms from spam.

One way to do so is the integration of the CAPTCHA functionality: A CAPTCHA is a challenge-response test most often placed within web forms to determine whether the user is human.

The key module to do so is the Drupal CAPTCHA module. The purpose of CAPTCHA is to block form submissions by spambots, which are automated scripts that post spam content everywhere they can. The CAPTCHA module provides this feature to virtually any user facing web form on a Drupal site. As per default, the Drupal CAPTCHA module offers you image and math challenges for the different forms.

The functionality of this core module can be extended with various additional Drupal CAPTCHA modules. Below the best Drupal CAPTCHA modules recommended by Drupal4U. Best means for us: Easy to configure, easy to handle, flexible and reliable. Furthermore our recommendation usually requires that the module is actively maintained and under active development.

CAPCHA Riddler

CAPCHA Riddler is a very lovely extension to make CAPCHA more personal/individual by adding a question as challenge. Captcha Riddler is a sub module of Captcha that lets site administrators create their own questions to foil automated spam bots. In our experience you get very little or no spam with very simple questions - such as what is the name of this website (number of letters as help). Hence it works even better as an image CAPTCHA with a strong configuration. Compared to the most commonly used configuration of the Google based reCAPTCHA, which can be very annoying and time consuming, is is furthermore much more user friendly.

  • Create your own Captcha questions to give your forms personality that matches your site
  • Allows multiple possible answers for one question.
  • Multiple possible questions, randomly presenting just one to the user.

Captcha Riddler is a sub module of Captcha that lets site administrators create their own questions to foil automated spam bots. This module lets you create custom riddles for the Captcha module. requiring guests to answer the 'riddle' before being allowed to submit the form.


This is currently the most popular extension. reCAPTCHA uses the reCAPTCHA web service from Google to improve the CAPTCHA system and protect email addresses. reCAPTCHA helps power massive-scale online collaboration. reCAPTCHA Mailhide helps you protect your inbox by asking people to solve a reCAPTCHA before they can view your email address. A slight disadvantage of this module might be, that you have to register, but this can be done within seconds. The funtion “No CAPTCHA reCAPTCHA”, is a great step regarding security and usability. Using this functionality the end-user typically only has to click a checkbox to confirm that he is human. Only if the system is not sure he will have to fill a challenge.

Uses the Google reCAPTCHA web service to improve the CAPTCHA system. It is tough on bots and easy on humans. reCAPTCHA is built for security. Armed with state of the art technology, it always stays at the forefront of spam and abuse fighting trends. reCAPTCHA is on guard for you, so you can rest easy.

Image CAPTCHA Refresh

Image CAPTCHA Refresh is an important extension if you want to use the image challenge of the CAPTCHA module. This module adds the link for refreshing image into the very popular widget image_captcha.

This module adds the link for refreshing image into very popular module for widget image_captcha. This module is going to be part of CAPTCHA module, see for updates.

The following module had potential - we feel its a nice aproach - but is NOT recommended because of bugs that have been identified by Drupla4U, because there is apparently no activity since long time and no release for Drupal 8 is planned.

Draggable Captcha

Draggable Captcha would be a stylish and user friendly extension for sites that require little security: It extends the CAPTCHA module and offers a mobile friendly, draggable & clickable style. Unfortunately this module only works properly if one disables javascript aggregation (see Aggregate Javascript makes symbols undraggable; it says that you can use the dev version to solve the problem, but this does not correspond to our experience). Disabling of javascript aggregation can be done for the whole website (not recommended) or only for individual sites with challenges. For the latter you could for example use the module Advanced CSS/JS Aggregation (quey string ?advagg=0 or ?advagg=-1) to do so. In any case this module is not recommended until this problem has been solved properly.

Extended the captcha module, offered a mobile friendly, draggable & clickable style.

The best Drupal CAPTCHA modules

Drupal themes to be compared