Math CAPTCHA for Forms - Free WordPress Plugin
Math CAPTCHA for Forms is a free WordPress plugin that stops spam bots with a simple math question instead of distorted letters, checkboxes, or third-party services. It works with Contact Form 7, WPForms, and any plain HTML form. There’s no API key to set up and no data sent to outside servers – the question and answer are handled entirely on your own site. Install it, drop in a shortcode (or auto-inject it into WPForms), and your form is protected in under two minutes.
How Math CAPTCHA for Forms Works
Each time your form loads, the plugin generates a simple question – addition, subtraction, or multiplication with small numbers – and stores the correct answer on the server, not in the page. Visitors just type the answer and submit the form as usual.
Behind the scenes, the answer is signed and checked server-side, so it can’t be read or guessed from the page source. A hidden honeypot field runs alongside the math question to catch bots that skip JavaScript entirely, and repeated failed attempts from the same visitor are automatically rate-limited. Most spam never gets far enough to see a second question.
01
No API Keys or External Services
Some CAPTCHA plugins rely on a third-party service to verify each submission. Math CAPTCHA for Forms doesn’t. Everything – the question, the answer check, and the rate limiting – runs on your own WordPress install. There’s nothing to sign up for and no external request that can slow down your form or fail if a third-party service goes down.
02
Two Display Styles
Choose how the question appears to visitors:
- Distorted image mode – the question renders on a canvas with subtle noise, closer to a traditional CAPTCHA look.
- Plain text mode – the question displays as readable text, better for accessibility and visitors using screen magnification or low-vision settings.
Switch between the two anytime from the plugin’s settings page – no shortcode changes needed.
Where You Can Use It
Math CAPTCHA for Forms isn’t tied to one form builder. It’s built to drop into whatever you’re already using:
- Contact Form 7 – add thetag inside the form editor, anywhere before the submit button.
- WPForms (Free or Pro) – turn on auto-inject from the settings page and pick which forms to protect, no HTML field required.
- Any custom HTML form – call do_shortcode(‘‘) directly in a template, and the plugin handles validation on submit.
Built-In Spam Protection Layers
The math question is the visible layer, but it’s backed by a few quieter ones working in the background:
- A hidden honeypot field that’s invisible to visitors but visible to basic bots
- Server-side rate limiting that blocks an IP after repeated failed attempts
- Signed, time-limited answers that expire automatically and can’t be reused
Why Site Owners Choose a Math CAPTCHA
A math question is something every visitor can answer in a few seconds – no tilted letters to squint at, no “click all the traffic lights” puzzles, no checkbox that occasionally still asks you to prove you’re human anyway. It keeps the form simple while still filtering out the automated spam that floods comment forms and contact forms on most WordPress sites. For a personal blog, a small business site, or a niche publication, that’s usually enough – the heavier puzzle-based services tend to be built for sites under much larger, more targeted bot traffic.
Good Fit and Not-So-Good Fit
It helps to be upfront about this. A math CAPTCHA is a great fit if you’re dealing with the everyday flood of basic spam bots – the ones that fill out forms automatically without solving anything. It’s a lighter option than a full bot-detection service, so if your site is a frequent target for advanced or human-operated spam, pairing it with another layer is worth considering.
Features List
- Free – no premium tier, no upsells
- No API key or third-party account needed
- Works with Contact Form 7 out of the box
- Works with WPForms Free and Pro
- Drop-in shortcode for any custom HTML form
- Two display modes: distorted image or plain text
- Built-in honeypot field for silent bot trapping
- Automatic rate limiting after repeated failed attempts
- Refresh button lets visitors get a new question instantly
- Lightweight – loads only on pages where the form actually appears
Frequently Asked Questions
Is Math CAPTCHA for Forms really free?
Yes. The plugin is completely free with no premium version or feature limits.
Do I need an API key to use it?
No. The plugin doesn't connect to any third-party service, so there's no API key, account, or sign-up required.
Does it work with Contact Form 7?
Yes. Add the
Does it work with WPForms?
Yes, with both the free and Pro versions. You can enable auto-inject from the plugin settings or add the shortcode manually in a Pro HTML field.
Can I use it on a form that isn't built with a form plugin?
es. Call do_shortcode('
Will this slow down my site?
No. The plugin only loads its assets on pages where the CAPTCHA actually appears, so pages without a form are unaffected.
Can bots still get through?
A math CAPTCHA stops the vast majority of basic automated spam bots. Like any CAPTCHA, it isn't designed to stop a determined human spammer — the honeypot field and rate limiting add extra layers for that.
Download HSArticle MATH CAPTCHA for Forms - Free WordPress Plugin
WordPress HSArticle MATH CAPTCHA for Forms is 100% free and open source. Download it directly from the official WordPress Plugin Directory.
