Truform Captcha

Getting started

Add Truform Captcha to your site with one script tag and two keys.

Truform Captcha protects forms and logins with short, unique puzzle challenges. Each challenge is generated on demand and is never reused.

What you need

After you subscribe to Truform in the Syndaq client area, each protected domain gets its own site key pair:

KeyPrefixUsed where
Site key (public)tf_pub_Browser: load the widget on your pages
Secret keytf_sec_Server: verify submissions with siteverify

The public site key is safe to expose in HTML. The secret key must stay on your server only.

Your site key is bound to the domain you configured at checkout (and its subdomains). See Site keys and security for domain rules and optional IP allowlists.

Quick integration

  1. Add the Truform loader script to your page.
  2. Place a widget container with your public site key for that domain.
  3. On form submit, send the response token to your backend.
  4. Call siteverify from your server before accepting the submission.
<script src="https://syndaq.com/truform/api.js" async defer></script>

<form action="/contact" method="post">
  <div class="truform" data-sitekey="tf_pub_your_site_key"></div>
  <button type="submit">Send</button>
</form>

The loader automatically finds elements with class truform and a data-sitekey attribute, then renders the puzzle widget.

Architecture

LayerURL
Widget loader & assetshttps://syndaq.com/truform/
Challenge APIhttps://api.syndaq.com/v1/truform/challenge
Browser verifyhttps://api.syndaq.com/v1/truform/verify
Server siteverifyhttps://api.syndaq.com/v1/truform/siteverify

Note: Always verify tokens on your server. Browser side verification alone does not protect your backend.

Manage keys in the client area

Open Services in the Syndaq client area and select your Truform subscription. From there you can:

  • View usage and remaining quota for the service
  • List every site key and its domain
  • Add additional site keys when your plan allows
  • Open Manage on a key to copy credentials, rotate the secret, or configure IP restrictions

Next steps