Security & Captcha
The Security & Captcha tab chooses the spam check that protects your forms, decides which forms use it, and holds the keys for Cloudflare Turnstile and Google reCAPTCHA.
To open it, go to WP Job Portal → Configurations and select Security & Captcha. For how the screen works, see System & Site.
Captcha Options
Section titled “Captcha Options”Enable captcha on various forms to prevent spam.
| Option | What it does | Default |
|---|---|---|
| Default Captcha Type | The spam check used on every protected form: Cloudflare Turnstile, Google reCAPTCHA, or Built-in (no keys needed, nothing for visitors to solve). | Built-in |
| Captcha on Registration Form | Protects the WP Job Portal registration form. | On |
| Captcha on Visitor Quick Apply | Protects the Quick Apply form for visitors who aren’t logged in. | On |
| Captcha on Visitor Job Form | Protects the job form for visitors who aren’t logged in. Needs Marketplace Suite (the screen says “Unlock with Visitor Can Add Job”). | On |
| Captcha on Visitor Resume Form | Protects the resume form for visitors who aren’t logged in. Needs Pro (the screen says “Unlock with Visitor Apply Job”). | On |
| Captcha on Tell a Friend Popup | Protects the Tell A Friend popup for visitors. | On |
The visitor job alert form has its own switch, Captcha on Visitor Job Alert Form, on the Email & Alerts tab.
Cloudflare Turnstile
Section titled “Cloudflare Turnstile”Free, and most visitors are never asked to solve anything. Get a site key and secret key from the Turnstile section of your Cloudflare dashboard.
| Option | What it does | Default |
|---|---|---|
| Turnstile Site Key | The public key. It appears in the page. | Empty |
| Turnstile Secret Key | The private key. It is only ever sent from your server to Cloudflare. | Empty |
Built-in check
Section titled “Built-in check”This section has no options. The built-in check needs no keys and asks visitors for nothing. It adds a hidden field that only automated submissions fill in, and rejects a form sent back faster than a person could complete it. It replaces the arithmetic question earlier versions asked.
Google reCAPTCHA
Section titled “Google reCAPTCHA”Configure Google reCAPTCHA v2 or v3.
| Option | What it does | Default |
|---|---|---|
| Google reCaptcha Version | Which reCAPTCHA to use: ReCaptcha Version 2 (the checkbox) or ReCaptcha Version 3 (invisible, score-based). | ReCaptcha Version 2 |
| Google reCaptcha Site Key | The site key from your Google reCAPTCHA admin console. | Empty |
| Google reCaptcha Secret Key | The secret key from your Google reCAPTCHA admin console. | Empty |
| reCAPTCHA v3 Score Threshold | For version 3 only. Google scores each submission from 0 to 1, and anything below this point is refused: 0.3 — lenient, fewer people challenged, 0.5 — balanced (recommended), or 0.7 — strict, more submissions blocked. | 0.5 |