Getting Started with Bouncer#

This guide walks you through installation, getting API keys, and configuring your first protected form.

Requirements#

• WordPress 6.0 or higher
• WooCommerce 8.0 or higher
• PHP 7.4 or higher

Installation#

From your WordPress admin#

1. Go to Plugins > Add New.
2. Search for “Bouncer” or “Captcha for WooCommerce”.
3. Click Install Now, then Activate.

Manual installation#

1. Download the plugin ZIP file from Themology.
2. Go to Plugins > Add New > Upload Plugin.
3. Choose the ZIP file and click Install Now.
4. Click Activate.

After activation, a welcome notice appears with a link to the settings page. You can also navigate directly to WooCommerce > Settings > Bouncer.

Step 1: Activate your license#

Before configuring CAPTCHA, activate your license key:

1. Go to WooCommerce > Settings > Bouncer > License.
2. Enter the license key from your Themology account.
3. Click Activate.

Once activated, all settings tabs become visible and auto-updates are enabled.

Step 2: Choose a provider#

Go to WooCommerce > Settings > Bouncer and select your CAPTCHA provider from the dropdown.

Provider	Setup effort	User friction	External service
Cloudflare Turnstile	API keys required	Very low (usually invisible)	Yes
Google reCAPTCHA v3	API keys required	None (invisible)	Yes
Google reCAPTCHA v2	API keys required	Medium (checkbox click)	Yes
hCaptcha	API keys required	Medium (challenge)	Yes
Self-Hosted Honeypot	None	None (fully invisible)	No

If you’re unsure, start with Cloudflare Turnstile. It’s free, privacy-friendly, and invisible to most visitors. If you need zero external dependencies, choose Honeypot.

Step 3: Get your API keys#

Skip this step if you chose Honeypot (no keys needed).

Cloudflare Turnstile#

1. Go to dash.cloudflare.com/turnstile.
2. Click Add widget.
3. Enter your site name and domain.
4. Select Managed widget mode (recommended).
5. Copy the Site Key and Secret Key.

Google reCAPTCHA v3#

1. Go to google.com/recaptcha/admin/create.
2. Enter a label and select reCAPTCHA v3.
3. Add your domain(s).
4. Accept the terms and click Submit.
5. Copy the Site Key and Secret Key.

Google reCAPTCHA v2#

1. Go to google.com/recaptcha/admin/create.
2. Enter a label and select reCAPTCHA v2 > “I’m not a robot” Checkbox.
3. Add your domain(s).
4. Accept the terms and click Submit.
5. Copy the Site Key and Secret Key.

hCaptcha#

1. Go to dashboard.hcaptcha.com/signup and create an account.
2. Add a new site and enter your domain.
3. Copy the Site Key (UUID format) and your Secret Key from the account settings.

Step 4: Enter keys and test#

1. Paste your Site Key and Secret Key into the fields on the CAPTCHA settings page.
2. Click the Test Connection button. A green checkmark confirms valid keys.
3. If the test fails, double-check the keys and make sure the domain matches.

Step 5: Select forms to protect#

Scroll to the Protected Forms section. Check the forms you want to protect:

Start with these (recommended):

• WooCommerce Checkout (Classic)
• WooCommerce Checkout (Block)
• WooCommerce My Account Login
• WooCommerce My Account Registration
• WooCommerce Product Reviews
• WooCommerce Order Tracking

You can enable additional forms later. See Protected Forms for the complete list.

Click Save changes.

Step 6: Verify it works#

1. Open your store’s checkout page in a private/incognito browser window.
2. You should see the CAPTCHA widget (or nothing visible if using an invisible provider).
3. Complete a test order to confirm checkout works normally.
4. Check the dashboard widget at Dashboard > Bot Protection Bouncer for verification stats.

Recommended next steps#

• CAPTCHA Providers: Understand each provider’s strengths and configuration options.
• Compatibility: Important if you use PayPal Payments, Apple Pay, or Block Checkout.
• Rate Limiting: Add a second layer of protection beyond CAPTCHA.
• Settings: Full reference of every option.
• Fraud Scoring: Set up the fraud scoring engine to catch fraudulent orders that bypass CAPTCHA.
• Geo Protection: Block countries or skip CAPTCHA for trusted regions.

Need help?#

• Check our FAQ.
• For bug reports or critical issues, visit Themology Support.