GateCHA CAPTCHA
by gatecha 0 (0 reviews)

GateCHA CAPTCHA

Self-hosted ALTCHA proof-of-work CAPTCHA via GateCHA. Protects WordPress forms without cookies, fingerprinting, or third-party services.

GateCHA CAPTCHA ranks #16,615 among WordPress.org plugins with 90+ active installations, is #648 of 2,958 in the Discussion & Community category, and was last updated Oct 25, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1.4
v1.5.0 Current Version v1.5.0
Updated 1 week ago Last Update on 25 Oct, 2026
Refreshed 1 week ago Last Refreshed on
#648 of 2,958 in Discussion & Community Top 25% by installs Downloads -77% this week Actively maintained
View on WordPress.org
Rank
#16,615
— No change
Active Installs
90+
— No change
KW Avg Position
14.3
— No change
Downloads
1.2K
+1 today
Support Resolved
0%
— No change
Rating
0%
Review 0 out of 5
0 (0 reviews)

Next Milestone 100

Total Progress 20%
90+ 100+
4,135
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 8 more installs to reach 100+

Rank Changes

15,784 16,200 16,615 17,030 17,446 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026 07-11-2026
15,670 16,060 16,451 16,842 17,232 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026 07-11-2026
Current #16,615
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

0 10 20 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026 07-11-2026
0 50 100 150 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026 07-11-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

0.0
0 reviews
Overall 0%
5
0 (0%)
4
0 (0%)
3
0 (0%)
2
0 (0%)
1
0 (0%)

Security History

Source: WPVulnerability

No known vulnerabilities on record for GateCHA CAPTCHA. Checked 3 weeks ago.

Frequently Asked Questions

Common questions about GateCHA CAPTCHA

GateCHA is a self-hosted CAPTCHA management service that wraps the ALTCHA proof-of-work protocol. It provides API key management, multi-site support, and an analytics dashboard. See the GateCHA website for more information.
Instead of asking users to solve image puzzles, the browser solves a small computational challenge in the background. This is invisible to legitimate users but expensive for bots trying to submit forms at scale.
The API key is used in the browser to fetch challenges, similar to how reCAPTCHA and hCaptcha use site keys. You can restrict your API key to specific domains in your GateCHA dashboard for additional security.
Only to the GateCHA server you configure: your own instance, or GateCHA Cloud if you choose it. Nothing is sent to Google, Cloudflare or any other third party. See the External Services section below.
An optional paid service for businesses (companies, freelancers, agencies) that runs the GateCHA server for you, hosted in France, with a free 30-day trial and no card needed. The plugin offers it on Settings → GateCHA only while no server is configured, next to the free self-hosted option, and contacts it only when you click Use GateCHA Cloud. Nothing in the plugin is locked behind it: a self-hosted GateCHA gives you every feature.
Proof-of-work proves a browser did the work. It does not prove a human filled the form in, and a headless browser solving the challenge passes it exactly like a visitor does. Interaction signals describe how the form was filled: how long the page was open, whether the pointer moved and how far, how many scrolls, touches and keystrokes there were, and how irregular the typing rhythm was. Your GateCHA instance turns those eight numbers into a score between 0 and 1, where higher means more likely automated. Only aggregates leave the browser. Never what was typed, never where the pointer was, never an IP address. Turn it on under Settings → GateCHA → Interaction Signals.
Not by itself. Collection only records scores, which you can watch on your GateCHA dashboard under HIS Monitor. Rejecting flagged submissions is a second, separate setting. Turn that second one on only once you have watched your own traffic, because a false positive is invisible: the visitor cannot submit and will not tell you. To see the scores in your own logs first, hook the gatecha_his_result action: add_action( 'gatecha_his_result', function ( $score, $suspected ) { error_log( "GateCHA HIS $score" ); }, 10, 2 );
It depends on Settings → GateCHA → Failure Mode. Fail closed (the default): protected forms cannot be sent until the server is back. Safer against spam, but visitors are blocked during the outage. Fail open: forms keep working. If the visitor's browser cannot reach GateCHA (server down or not answering for 15 seconds, or API key disabled), the CAPTCHA is replaced by a short note and the form can be sent. Before accepting it, your WordPress server checks GateCHA itself; a submission without a solved CAPTCHA is only accepted when GateCHA really is unavailable, so a bot that skips the CAPTCHA while your server is up is still refused. Either way, an administrator notice reports the outage in wp-admin.
Yes, with GateCHA 0.12.0 or later. On your GateCHA dashboard, open the key this site uses and click Generate next to Stats token, then paste the token (it starts with gs_) in Settings → GateCHA → Stats Token. A GateCHA CAPTCHA widget then appears on the WordPress dashboard with today's verified and failed submissions, the last 30 days and the top countries, and the full view sits at the top of the settings page. The token is read-only and only opens this key's statistics. It never leaves your WordPress server: the numbers are fetched server-side and kept for 10 minutes. Leave the field empty and no statistics request is made.
Yes, use the [gatecha] shortcode to place the widget anywhere. Then verify the altcha POST field server-side.

Sign In / Register

You need to sign in or register to use this feature.