# Adding CAPTCHA protection to a Drupal site

> Reduce spam and bot sign-ups on your Drupal site by installing and configuring the official CAPTCHA module on your forms.

Source: https://helpcenter.ruachost.com/apps/drupal/adding-captcha-protection-to-a-drupal-site/

CAPTCHA protection helps secure your Drupal site by reducing spam and blocking automated bots. On **ruachost.com**, you can add CAPTCHA functionality using the official **CAPTCHA module**.

## Why Add CAPTCHA?

- Prevents automated spam registrations and form submissions.
- Protects login and comment forms from brute‑force attacks.
- Adds an extra layer of security to your site.

## Steps to Add CAPTCHA Protection

### Step 1: Download the CAPTCHA Module

1. Visit the Drupal CAPTCHA project page.
2. Download the `.tar.gz` file to your computer.

### Step 2: Install the Module

1. Log in to your Drupal site as an administrator.
2. In the top menu, click **Extend → Install new module**.
3. Upload the downloaded file and click **Install**.
4. Once installed, go to **Extend → List tab → SPAM CONTROL**.
5. Enable the **CAPTCHA module**.

### Step 3: Configure CAPTCHA

1. Go to **Configuration → People → CAPTCHA**.
2. Select which forms should be protected (e.g., registration, login, comment forms).
3. Choose the challenge type:

   - **Math CAPTCHA** (default).
   - **Image CAPTCHA** (requires enabling the Image CAPTCHA module).
4. Click **Save configuration**.

### Step 4: Test CAPTCHA

1. Visit your site’s registration or login page.
2. Confirm that a CAPTCHA challenge appears.
3. Submit the form to verify proper functionality.

## Important Notes

- By default, the CAPTCHA module uses math problems.
- For image‑based CAPTCHA, enable the **Image CAPTCHA module**.
- Always test CAPTCHA placement to ensure it doesn’t block legitimate users.