In the past days I received several requests from my readers to suggest some CAPTCHA scripts and services quickly to embed into a web page. This post proposes a list of ten interesting scripts and services you can use to provide protection from spam bots and ensure that only humans perform certain actions.
1. reCAPTCHA
reCAPTCHA is a free service which helps prevent automated abuse of your site (such as comment spam or bogus registrations) by using a CAPTCHA to ensure that only humans perform certain actions.
2. Securimage
Securimage is an open-source free PHP CAPTCHA script for generating complex images and CAPTCHA codes to protect forms from spam and abuse. It can be easily added into existing forms on your website to provide protection from spam bots. It can run on most any webserver as long as you have PHP installed, and GD support within PHP. Securimage does everything from generate complicated CAPTCHA images to making sure the code the user entered was correct.
3. WebSpamProtect
WebSpamProtect allows you to instantly add verification image (CAPTCHA) to your web site and protect your forms against spam robots. In order to protect your web form, this system requires that you install a small piece of code onto your web page. The code requires that your web site support PHP, Perl, ASP or ASP.NET. Basic plan is free but you can buy a Premium, Advanced or Professional paln with a little expense.
4. Cryptographp
Cryptographp is a PHP script for generate captchas. Cryptographp limit the robots bombarding spams and automating the forms: spaces members subscriptions, guestbooks, forums... This script is free and does not use any database. It is compatible with PHP >= 4.3.0. Cryptographp also exists into plugins for WordPress, wpMu for WordPress, Symfony and Guppy.
5. CAPTCHA-Service
captchas.net provides CAPTCHA images and audio files you can use in html-forms. To use this technology, your web pages have to be generated dynamically in any programming language PHP, ASP, Perl, Python, JSP, Ruby.
6. WP Captcha-Free
WP Captcha-Free blocks comment spam by using a combination of time-based hash (a.k.a. Time Based Tokens, TBT) and JavaScript (AJAX). When a comment is posted the plugin validates a hash based on time (and some other parameters). Comments posted via automated means will not have a hash or will have an expired hash and will be rejected. Unlike using a captcha, this does not place any burden on the commenter.
7. ProtectWebForm
ProtectWebForm is a service to add CAPTCHA images and audio files on your website. You have to create an account, generate your CAPTCHA type with all the desired parameters and include it on your web pages.You can also use it on your Wordpress template with this plugin.
8. ProtectWebForm
OpenCaptcha is a simple web service which requires no special configurations or modules. Basic installation is cut-and-paste, and requires no ability to program image manipuation scripts. New fonts, image algorithms, and distortions applied weekly.
9. Form-to-email script protected by Captcha
This form-to-email script is intended to collect data from an HTML form and send it to a specified email address using a CAPTCHA script to stop spam. It works with any kind of HTML form and you can use it multiple times on your pages.
10. freeCap
freeCap is a GPL CAPTCHA script to stop spam. It has been used on any form on any kind of website. It does require some knowledge of PHP to install, though there are several captcha plugins for forum and blog software listed below.
Any suggestion? Add a comment, thanks!
Related Content
- Useful Ajax Auto Suggest scripts collection- Interesting html FORM Validators for web developers
- Best Rich Text Editors ready to use in web projects
- File uploaders collection for web developers
- Best Image Croppers ready to use for web developers




Thanks!.. Antonio
I'm particularly fond of the concept behind firepages' "captcha, counting piggies": http://www.firepages.com.au/captcha.htm
Some have complained the approach is either counter-accessible or insecure, but it's hard to have both. At any rate, it's an easy method despite being weird, and worth mention.
Very useful information for web publishers.I wanted to add a comment box with Captcha on my weblog.Thanks
Recaptcha can be used on a pure HTTPS page (i.e. no insecure elements on the page.)
I know because I was asked to do this- after looking under the hood I saw it was just setting an additional arg on the html generator function.
Do you know if the others can be configured for SSL just as simply?
Nice list, Thanks for sharing
nice list antonio
Great content as always! I am going to give one or two of these a go.
Antonio: Thank you for the list. It's now listed on Delicious.com as one of the 25 most popular bookmarks for 2-28-09.
Looks like a lot of people want to keep comment spammers out of their blogs.
Great list Antonio...
Thanks!
Greetings from Argentina
good info, thanks..
Thanks for sharing. I love CAPTCHA =)
Thanks!
I am about to finish a site where I want to enforce human entry. This is a great resource!
Thanx for the list. Just for your info: here's another good captcha tutorial (in german): http://www.stoppt-den-spam.info/webmaster/captcha-tutorial/index.html
It would be nice to see something like the Wordpress CAPTCHA Free available as an API for any website independently from the platform used
Nice post, also congrats for being Tweeted by Smashing Magazine with this post.
titel
Thanks for this good list of captcha scripts, but I've got a question concerning the "strength" of the underlying algorithms used by thoses scripts : are they really unpredictable? The question has been the same for Random Numbers Generators (RNG) such as the classical rand that is pretty week againt MT_rand for example.
Do you know if some study (or article) exist on the subject?
This could be of interest when selecting a captcha script for a website that have to be very protected...
Wonderful list, I've been thinking about making my own list, but then, here it is already! Well done.