Module configuration

Permissions

Altcha can be configured by users with the Administer altcha permission, on the /admin/config/people/captcha/altcha path. It is recommended to also grant the Administer CAPTCHA settings permission, which is provided by the CAPTCHA module. This grants access to the general captcha configuration, and makes the CAPTCHA & ALTCHA settings menu links available.

Widget configuration

Most altcha configuration options are explained in the form field descriptions, a few options can use some extra documentation.

Complexity

The complexity is a number between 1.000 and 1.000.000 (default 20.000). A lower complexity might reduce security against automated attacks but can enhance user accessibility. What takes less than a second on a new iPhone, might take 30 seconds on a low-end Android phone. Test with physical devices typical for your users.

Full explanation of challenge complexity can be found in the altcha docs.

Invisible captcha

When checking the "invisible captcha" option, it will activate altcha's "floating UI". It hides the widget on the form initially, and makes it appear on form submit. The "Floating anchor" field determines on which element the captcha popup will be achored. By default, it uses the input[name="op"] selector. On a standard form, it looks like this:

Note: when there are multiple submit elements in the same form (e.g. multistep form wizards), this could cause some unexpected behavior. It is recommended to use the "Floating anchor" field and set it to a unique selector, which is only available on the form submit button.