CAPTCHA & Spam Protection
Protect your forms from spam submissions with Cloudflare Turnstile.
Last updated March 20, 2026
CAPTCHA & Spam Protection
All Picked Smart forms include Cloudflare Turnstile CAPTCHA protection on every plan - no configuration required.
How It Works
- When a visitor loads your form, Turnstile runs a background challenge
- Most legitimate users pass automatically without seeing a visual puzzle
- Suspicious traffic gets a brief interactive challenge
- The CAPTCHA token is verified server-side before the submission is accepted
Configuration
CAPTCHA is enabled by default on all public forms. No setup is needed.
What Gets Blocked
- Automated bot submissions
- Scripted form attacks
- High-volume spam attempts
- Submissions from known malicious IPs
IP Tracking
Submission metadata includes the respondent's IP address for audit purposes. This is visible in the response detail view.