Free + Pro · Optional human verification
Connect a CAPTCHA service
Both editions include Turnstile, reCAPTCHA and hCaptcha. Follow this guide to connect your own provider, then choose which supported forms use its human check.
In version 1.21.0 and later, open Gate House directly in the WordPress sidebar, then choose the tab named in this guide. Version 1.20.1 and earlier use Settings → Gate House.
In WordPress: Gate House → Provider
Choose your provider
Select Cloudflare Turnstile, Google reCAPTCHA v2 checkbox, reCAPTCHA v3 or hCaptcha. The on-screen guide links to your provider and explains which keys to create.
Legacy screenshot: both current editions include these providers and built-in keyless checks. Use the current controls described here.Open full-size image (opens in a new tab) Save your matching keys
Register the exact hostname that serves your forms, such as
shop.example.com. Copy the matching Site key and Secret key into Gate House and check Website hostname. In Free, select Save provider settings; in Pro, select Save your keys.The site key is public. Keep the secret key out of screenshots and support messages. Changing provider settings returns visitor checks to observation, so review and re-enable your intended form checks after testing.
Legacy screenshot with empty example fields. Current Free uses Save provider settings; Pro uses Save your keys.Open full-size image (opens in a new tab) Run the connection test
In Test your connection, complete a fresh provider challenge and select Run connection test. This verifies the saved keys and challenge with your provider. It does not submit a customer form or place an order.
If the page asks for a fresh test before enabling another Human check, run it again with the current keys. Use your own live keys on production; public test keys cannot protect a live site.
Choose Human check on your forms
In Free, open Protection, select Human check for the native forms you want to protect and select Save protection choices. In Pro, open Rules, choose Human check under the relevant forms and select Save changes. Pro also supports Contact Form 7 and WPForms when active.
Try successful and rejected submissions on staging. For checkout, test complete sandbox payment journeys before applying the settings to your live store. Other forms can continue using Invisible checks.
Pro: choose what happens during a provider outage
In Provider → If a provider has an outage, use Fall back to automatic protection during provider outages and select Save outage behavior. When enabled, Pro can verify the built-in keyless proof if the external provider is unavailable, and records the fallback in Activity. With it off, required external checks fail closed during an outage.
Free does not include this outage fallback. Its Invisible checks work locally without an external provider. Add Pro if you need the fallback control.
Connection test not passing?
- Check that the provider, key type and hostname match.
- Save your latest changes before trying the test again.
- For reCAPTCHA, use keys that work with SiteVerify, not a Google Cloud API key.
- Check whether your host, firewall or content policy prevents the challenge or verification request.