ExpressionEngine® User Guide

CAPTCHA Settings

Control Panel Location: Settings ‣ CAPTCHA

This section of the Control Panel allows you to set CAPTCHA preferences for your website.

Permission Restrictions

  • Access settings: General Settings


Require CAPTCHA?

If you enable this preference, then site visitors will be required to pass a CAPTCHA to submit any front-end form, including Channel Form, comment forms, and member registrations. If members are logged in, they will not have to enter a CAPTCHA unless the Require CAPTCHA while logged in? preference is enabled below.

Use TrueType font?

If your server supports TrueType Fonts, then you can enable this setting. If you receive errors such as Call to undefined function: imagettftext() on your site then your server does not support TrueType Fonts and you should set this to “No”.

Add random number?

Specify whether to add a random three-digit number to the end of each generated CAPTCHA word. This makes it more difficult for scripts to guess or brute-force the form submission.

Require CAPTCHA while logged in?

If you enable this preference, then members who are logged in will need to fill out CAPTCHA information in order to post comments (assuming you’ve enabled CAPTCHA support for comment posting). If you disable this setting, then members who are logged in can bypass the CAPTCHA check.

CAPTCHA directory

The URL to your CAPTCHA images. In most cases, this will be similar to:


Here you set the server path (not the URL) to your CAPTCHA images folder. By default, it is the captchas folder inside the images folder.

The server path might look something like:


If you do not know what to use for your full server path, contact your Host or server admin. Remember that this upload folder must be writable. See File Permissions for details.