PrestaShop ALTCHA Anti-Spam — Free Protection Against Bots and Spam
Protect your PrestaShop forms from spam and bots with ALTCHA. A free alternative to reCAPTCHA with no Google dependency. Easy to set up, lightweight and compatible with PrestaShop 1.7, 8 and 9.
Key Features
100% Free Forever
No licenses, no subscriptions, no usage fees. ALTCHA is an open source standard. Install the module and use it forever at absolutely no cost.
More Secure than reCAPTCHA
Challenges signed with HMAC-SHA256, configurable expiry and IP binding. Tokens cannot be reused or forged. Real security, not just appearance.
No Google, No Tracking
No data is sent to third parties. No tracking cookies, no fingerprinting. Native GDPR compliance. Your customers' privacy is guaranteed.
Invisible Proof of Work
The ALTCHA widget solves a Proof of Work challenge in the background. The user ticks a checkbox and that's it. No image puzzles, no frustrating tests, no friction.
5 Protectable Forms
Contact, registration, password recovery, newsletter and ets_cfultimate forms. Choose which forms to protect from the admin panel with a simple multiselect.
2-Minute Setup
Install the module, activate it and choose which forms to protect. No external API keys required, no complex configurations, no core modifications.
Customizable Widget
Light, dark or automatic theme. Widget text in all your store languages. Option to hide logo and footer for a perfect visual integration with any theme.
Advanced Configuration
Adjust PoW difficulty, token expiry time, script source (local or CDN) and regenerate the HMAC secret from the admin panel with a single click.
Explore All Features
The ALTCHA Widget in Action

Friction-Free User Experience
ALTCHA replaces annoying image captchas with a simple checkbox. The widget runs a Proof of Work challenge in the background: the user only needs to click once. Compatible with all PrestaShop themes without any modifications needed.
Display Options
- Automatic theme (follows system preference)
- Light theme for white backgrounds
- Dark theme for dark designs
- Widget text in all store languages
- Option to hide the ALTCHA logo
- Option to hide the footer
Activation Mode
- onsubmit: solves when the form is submitted
- onload: solves automatically when the page loads
- manual: user activates the widget with a click
- Script loadable from CDN or stored locally
- Download JS script directly from the admin panel
Protected Forms

Full Control Over What to Protect
From the "Forms" tab in the configuration panel, use a multiselect to choose which of your store's forms should be protected. You can enable or disable protection for each form independently at any time.
Compatible Forms
Protect the native PrestaShop contact form. Eliminate spam messages without your legitimate customers noticing any difference.
Block mass fake account registrations. Keep your customer database clean and free of bots creating accounts to abuse promotions and coupons.
Protect the password recovery form against user enumeration attacks and bulk email sending abuses.
Prevent bots from inflating your mailing list with fake emails. Ensure only real subscribers receive your email marketing campaigns.
Compatible with the popular ets_cfultimate contact form module. Protect any CMS form created with this third-party module.
Have a custom form? Use the displayBkaltchaWidget hook to insert the widget into any custom form in your store.
Complete Configuration Panel

5 Configuration Tabs
The admin panel is organized into 5 tabs so you can find every option easily: General, Forms, Appearance, Advanced and Status. No complications — everything accessible in one click.
Configuration Options
- Enable/Disable — Toggle protection on or off
- Show to logged-in users — Choose whether registered customers also need to solve the captcha
- Load on all pages — Load the script once in the global head
- Protected forms — Multiselect with all available forms (chosen)
- Widget theme — Light, dark or automatic
- Activation mode — onsubmit, onload or manual
- Widget text — Customizable in each store language
- PoW difficulty — Adjust the required computational effort level
- Token expiry — Maximum validity time for each challenge
- Script source — Local (included) or external CDN
- Regenerate HMAC secret — Rotate the cryptographic key with one click
- Download altcha.min.js — Update the local script from the official CDN
- Status tab — Widget preview and real-time challenge system test
Debug Mode with Detailed Logs
Enable debug mode from the General tab to log all generated challenges and completed verifications. Logs are automatically organized by date in the module folder to facilitate troubleshooting.
Superior Technical Security

Why ALTCHA is More Secure than reCAPTCHA
reCAPTCHA delegates verification to Google's servers. ALTCHA verifies everything on your own server, with no external dependencies. Challenges are cryptographically signed and single-use.
Security Mechanisms
- Challenges signed with HMAC-SHA256
- Configurable absolute token expiry
- Maximum token age (60 seconds)
- Token binding to client IP address
- Prevention of cross-IP replay attacks
- HMAC secret regenerable at any time
Guaranteed Privacy
- Zero data sent to Google or third parties
- No tracking cookies
- No browser fingerprinting
- Native GDPR compliance
- Everything processed on your own server
- Open source and auditable
Comparison: ALTCHA vs reCAPTCHA
ALTCHA (this module)
- Free forever
- No Google dependency
- No cookies or tracking
- Verification on your server
- Open source (MIT)
- GDPR-compliant without extra setup
reCAPTCHA (Google)
- May have usage costs
- Full dependency on Google
- Active cookies and fingerprinting
- Data sent to Google's servers
- Proprietary code, not auditable
- Requires additional GDPR configuration
Why Do You Need This Module?
Eliminate Contact Spam
Receiving dozens of spam messages a day through the contact form? ALTCHA blocks them server-side before they ever reach your inbox.
Protect Your Customer Base
Bots register fake accounts to abuse coupons and discounts. ALTCHA blocks automated registrations and keeps your customer database clean.
High-Quality Email List
Bots inflate newsletter lists with fake emails that damage your sending reputation. ALTCHA ensures only real subscribers enter your mailing list.
Simplified Legal Compliance
By not relying on Google, you don't need to add ALTCHA to your cookie policy or obtain additional consent to use it. GDPR made simple.
Zero Performance Impact
The ALTCHA script is ultra-lightweight and loads asynchronously. No impact on your page load time or PageSpeed score.
Better User Experience
reCAPTCHA frustrates your customers with traffic light puzzles. ALTCHA is transparent: a simple checkbox and the widget does the heavy lifting in the background.
Perfect for Every Type of PrestaShop Store
Any store receiving spam or bot registration attempts benefits from this module
Protect all your store's forms against spam and bots for free. No complex configurations, no usage costs, no external service dependencies.
Competitors use bots to extract contact information and register accounts. ALTCHA protects your access request and quote forms without bothering real customers.
ALTCHA works equally in all languages and markets. No geographic restrictions, no accessibility issues due to Google being blocked in certain countries.
If you operate in the EU and want to minimize reliance on Google tools, ALTCHA is the perfect alternative. Zero data to third parties, zero cookies.
Bots create accounts en masse to abuse your coupons and discounts. With ALTCHA on registration, every account is created by a real person.
A clean subscriber list improves your delivery and open rates. ALTCHA on the newsletter form guarantees every subscriber is a real human.
Technical Specifications
PrestaShop Compatibility
- PrestaShop 1.7.x (all versions)
- PrestaShop 8.x (all versions)
- PrestaShop 9.x (latest)
- Multi-store compatible
Requirements
- PHP 7.4+ (8.x recommended)
- No external API keys required
- Works with all themes
- No PrestaShop core modifications
Performance
- ALTCHA script loaded asynchronously
- Script only on pages with active forms
- No additional SQL queries per page load
- Local script option for maximum speed
Support & Updates
- 3 months premium support
- Free updates for 12 months
- Documentation included in code
- Installation assistance
You might also like
7 other products in the same category:
Your rights on this purchase
This is the official European Union notice on the legal guarantee of conformity, reproduced exactly as the Commission publishes it.
View full sizeTell us what your store needs
A module, a development, or just a second opinion. The first consultation is free, and a fixed quote comes out of it with a price and a date.