OpenVault Spam Shield with reCAPTCHA for Elementor Forms

Elementor Pro v4 atomic forms have no built-in CAPTCHA. This plugin adds Google
reCAPTCHA to every atomic form on the site and checks the token on the server
through the elementor_pro/atomic_forms/spam_check filter, so a bot that skips
the browser still gets blocked.

Features:

• reCAPTCHA v2 checkbox, v2 invisible or v3 (score based).
• Automatic on every v4 atomic form: no field to add.
• Server-side verification of every submission.
• Optional notice with the Google privacy and terms links when the badge is hidden.

Requires Elementor Pro with v4 atomic forms. Settings live in Settings > Spam Shield.

External services

This plugin relies on Google reCAPTCHA, a third-party service provided by Google LLC, to tell humans from bots. It is only active once you enter your own reCAPTCHA keys.

• In the visitor’s browser, pages with an Elementor v4 form load the reCAPTCHA script from https://www.google.com/recaptcha/api.js. Google receives the visitor’s IP address, browser data and the interaction data reCAPTCHA collects.
• On your server, every form submission sends the reCAPTCHA token, your secret key and the visitor’s IP address to https://www.google.com/recaptcha/api/siteverify to confirm the token.

Google reCAPTCHA terms: https://policies.google.com/terms
Google privacy policy: https://policies.google.com/privacy

OpenVault Spam Shield is an independent plugin. It is not affiliated with, endorsed by or sponsored by Google or Elementor. reCAPTCHA is a trademark of Google LLC and Elementor is a trademark of Elementor Ltd.