reForge Captcha Manager is a WHMCS addon module that replaces the default Google reCAPTCHA with reForge Captcha — a privacy-friendly, GDPR-compliant captcha solution with support for multiple widget types, themes, and languages.
The module injects the captcha widget into your WHMCS client area forms automatically, and validates tokens server-side before allowing form submissions through.
allow_url_fopen enabled in PHP (for server-side token verification)You need an account on one of the two reForge Captcha regions:
Region URL Use when Global (US) reforgecaptcha.cloud Default — recommended for most users EU (Europe) eu.reforgecaptcha.cloud Required if your server or users are in the EU and data must stay in EuropeRegister at your chosen region, create a site, and copy your Site Key (public) and Secret Key (private). Make sure to register your WHMCS domain in the dashboard.
Important: Your account, site key, and secret key are region-specific. A key created on
eu.reforgecaptcha.cloudwill not work with the Global region and vice versa.
reforgecaptcha folder to your WHMCS server at:
/path/to/whmcs/modules/addons/reforgecaptcha/
modules/addons/reforgecaptcha/
├── reforgecaptcha.php
└── hooks.php
644 for files, 755 for directories).yourwhmcsinstallation.tld/youradminpath/configaddonmods.php
Once activated, manage all settings at:
yourwhmcsinstallation.tld/youradminpath/addonmodules.php?module=reforgecaptcha
site_.
Secret Key (Private)
Your private key used for server-side verification. Never expose this publicly.
Region
Select Global (US) or EU (Europe) to match the region where your account was created.
Checkbox — classic click-to-verify. Invisible — zero friction, runs silently. Managed — adaptive, decides automatically. Image — high security image challenge.
Theme
Auto follows the user's system preference. Light or Dark forces a specific theme.
Language
Widget display language: English, Dutch, German, French, or Spanish.
Enable or disable the captcha widget per page using the toggle switches. Pages with the toggle off will not show any widget and will not be verified.
By default the module auto-detects the correct form and submit button on each page. If your WHMCS theme uses non-standard markup, you can override the injection target with a custom jQuery selector.
Example: To inject the widget before a button with id #mySubmitBtn, enter #mySubmitBtn in the relevant selector field.
Leave blank to use automatic detection.
<head> of the page on any enabled page.<div class="reforge-captcha"> is injected into the form via jQuery, just before the submit button.reforge-captcha-token input into the form./api/verify) and checks that success is true and score >= 0.5.When EU is selected, all API calls and widget scripts are routed through eu.reforgecaptcha.cloud instead of reforgecaptcha.cloud. This includes:
eu.reforgecaptcha.cloud/assets/js/widget.js
eu.reforgecaptcha.cloud/api/verify
Changing the region in the settings takes effect immediately — no code changes required.
yourwhmcsinstallation.tld/youradminpath/configaddonmods.php
modules/addons/reforgecaptcha/ directory from your server.Deactivating removes the module from WHMCS but does not delete saved settings from the database (tbladdonmodules). To fully clean up, remove rows where module = 'reforgecaptcha' from that table.
Be the first to review reForge Captcha Manager.
The best place to start if you need help with a specific product is to contact the developer. All WHMCS Marketplace developers have both a website and support URL listed.
>= 0.5).
Easily generate and change passwords for your clients without the need to send an email
Give your customers the power to unblock themselves from the CSF Firewall! Lessen your staff support ticket load
