imi / magento2-friendly-captcha

imi/magento2-friendly-captcha

Friendly Captcha integration for Magento2

  • iMi digital GmbH
magento2-module Compatibility: 2.4.7, 2.4.9 Code Quality: Fail Tests: Pass Security: Pass OSL-3.0

Official Friendly Captcha Module for Magento

Installing on Magento 2

1a. Install using composer

From command line:

composer require imi/magento2-friendly-captcha
php bin/magento module:enable IMI_FriendlyCaptcha
php bin/magento setup:upgrade

1b. Or: Install via Marketplace

The module is also available via Adobe Commerce Marketplace.
After going through the free checkout process, you can install via composer:

composer require friendly-captcha/magento2-friendly-captcha
php bin/magento module:enable IMI_FriendlyCaptcha
php bin/magento setup:upgrade

Remark: The composer name is different from the GitHub version. Otherwise the module is identical.

2. Generate site key

https://friendlycaptcha.com/signup

3. Enable and configure from your Magento backend config

Stores > Configuration > Security > Friendly Captcha

Frontend

IMI_FriendlyCaptcha adds a Friendly Captcha widget to:

  • Login
  • Register
  • Contact form
  • Forgot password
  • Send to Friend
  • Newsletter signup*
  • Product Reviews

*If you are not using the Magento Newsletter function, please disable the Newsletter Captcha in the settings - otherwise it would still be loaded on each page and later removed via JavaScript.

GraphQL Contact Mutation

Magento's contactUs GraphQL mutation is not protected by the normal Friendly Captcha frontend widget flow. This can lead to SPAM.

If you want to block that bypass completely, enable:

Stores > Configuration > Security > Friendly Captcha > Frontend > Disable GraphQL contactUs mutation

Requirements

  • PHP >= 8.1
  • Magento >= 2.4.6

Security Scan

This module is accepted by the Magento security scan by Adobe, which normally looks for Google ReCAPTCHA, i.e. replacing the ReCAPTCHA with the Friendly Captcha should not trigger any false positives.

Development

See DEVELOPMENT.md for details on how to contribute to this module.

No changelog yet

The vendor hasn't published a changelog. Tagged releases appear in the Versions tab.

Versions
Version Stability QA Status Compatibility Released
4.3.0 stable Fail Magento 2.4.7, 2.4.9 Details 2026-06-17 07:53:31
4.2.3 stable Fail Magento 2.4.7-2.4.9 Details 2026-05-08 12:25:47
4.2.2 stable Not tested Not yet tested Details 2026-05-08 12:03:21
4.2.1 stable Not tested Not yet tested Details 2026-05-08 10:29:01
4.2.0 stable Not tested Not yet tested Details 2026-05-06 15:19:50
4.1.1 stable Not tested Not yet tested Details 2026-05-05 09:10:47
4.1.0 stable Not tested Not yet tested Details 2026-05-04 14:05:53
4.0.0 stable Not tested Not yet tested Details 2026-04-28 15:13:18
3.3.1 stable Not tested Not yet tested Details 2026-03-31 08:40:56
3.3.0 stable Not tested Not yet tested Details 2026-03-20 07:42:38
3.2.2 stable Not tested Not yet tested Details 2026-02-16 08:14:10
3.2.1 stable Not tested Not yet tested Details 2026-02-04 18:51:17
3.2.0 stable Not tested Not yet tested Details 2026-01-07 08:26:20
3.1.2 stable Not tested Not yet tested Details 2025-10-30 10:50:48
3.1.1 stable Not tested Not yet tested Details 2025-10-01 09:59:10
3.1.0 stable Not tested Not yet tested Details 2025-04-28 08:19:36
3.0.2 stable Not tested Not yet tested Details 2025-02-12 15:31:30
3.0.1 stable Not tested Not yet tested Details 2024-10-29 09:45:08
3.0.0 stable Not tested Not yet tested Details 2024-07-04 14:42:44
2.0.5 stable Not tested Not yet tested Details 2024-06-25 14:34:44
2.0.4 stable Not tested Not yet tested Details 2024-03-04 15:24:48
2.0.3 stable Not tested Not yet tested Details 2024-02-23 06:58:47
2.0.2 stable Not tested Not yet tested Details 2024-02-14 13:26:35
2.0.1 stable Not tested Not yet tested Details 2024-01-05 13:13:41
2.0.0 stable Not tested Not yet tested Details 2023-12-01 14:26:02
2.0.0-rc.1 RC Not tested Not yet tested Details 2023-11-29 07:59:38
1.6.2 stable Not tested Not yet tested Details 2023-04-04 16:36:44
1.6.1 stable Not tested Not yet tested Details 2023-03-24 14:08:40
1.6.0 stable Not tested Not yet tested Details 2023-03-23 15:35:53
1.5.1 stable Not tested Not yet tested Details 2023-03-21 13:35:30
1.5.0 stable Not tested Not yet tested Details 2023-03-21 13:29:57
1.4.0 stable Not tested Not yet tested Details 2023-03-21 09:07:51
1.3.1 stable Not tested Not yet tested Details 2023-02-17 14:54:45
1.3.0 stable Not tested Not yet tested Details 2022-12-14 13:03:59
1.2.0 stable Not tested Not yet tested Details 2022-12-14 09:46:51
1.1.0 stable Not tested Not yet tested Details 2022-12-13 10:09:12
1.0.1 stable Not tested Not yet tested Details 2022-10-13 14:44:49
1.0.0 stable Not tested Not yet tested Details 2022-10-13 14:43:28
0.2.1 stable Not tested Not yet tested Details 2021-04-28 14:23:19
0.2.0 stable Not tested Not yet tested Details 2021-04-28 12:39:37
0.1.0 stable Not tested Not yet tested Details 2021-04-27 16:13:30

Requires 7

Package Constraint
ext-intl >=1.0.0
magento/framework ^103.0.0
magento/module-checkout ^100.3.0
magento/module-contact ^100.4.0
magento/module-customer ^102.0.0|^103.0.0
magento/module-newsletter ^100.3.0
php >=8.1

Requires-dev 1

Package Constraint
friendsofphp/php-cs-fixer ^3.95

Compatibility

Each Magento release line is installed on its supported PHP versions, then the module is built (DI compilation + static-content deploy) and its unit and integration suites are run. The matrix shows the lines and PHP versions the module is confirmed to install and run on. Code-quality results further down (phpstan, phpcs, …) are reported separately and never affect compatibility.

Compatibility matrix (Magento × PHP)
Magento PHP 8.2 PHP 8.3 PHP 8.4 PHP 8.5
2.4.7 Pass Pass
2.4.8 Pass not tested
2.4.9 Pass Pass

Code Quality

Advisory checks against the module's source. Static analysis runs once across the whole module; PHPStan re-runs per Magento + PHP version because resolvable symbols differ between releases. These NEVER affect the Compatibility badge — a phpcs finding can't make a module incompatible.

Static analysis

Coding standards (phpcs), mess detection (phpmd), copy-pasted code (cpd), PHP cross-version compatibility, composer.json validity. Each runs once for the whole module.

Static analysis results
Tool Status Findings Summary
PHPCS Warning 10 10 warnings (ruleset: Magento2) — 4 auto-fixable with phpcbf
PHPMD Warning 2 2 rule violations (IfStatementAssignment:1, UnusedFormalParameter:1)
Cpd Pass 0
Composer validate Pass 0

PHPStan

Type-checks the module's PHP against a real Magento install at the configured gate level. Re-runs per Magento and PHP version because resolvable symbols differ between releases. Cell → details modal.

PHPStan results by Magento and PHP version
Magento PHP 8.2 PHP 8.3 PHP 8.4 PHP 8.5
2.4.7 12 12
2.4.8 12 12
2.4.9 12 12

Tests

Unit and integration suites, run for each applicable Magento and PHP version. A test failure speaks to the module's behaviour, not its compatibility with a Magento line, so it is reported here separately and never reddens the compatibility matrix.

Unit tests

Unit tests results by Magento and PHP version
Magento PHP 8.2 PHP 8.3 PHP 8.4 PHP 8.5
2.4.7 N/A N/A
2.4.8 N/A N/A
2.4.9 N/A N/A

Integration tests

Integration tests results by Magento and PHP version
Magento PHP 8.2 PHP 8.3 PHP 8.4 PHP 8.5
2.4.7 Pass Pass
2.4.8 Pass Pass
2.4.9 Pass Pass

Security

Security checks run directly against the module: an audit of its declared dependencies for known vulnerabilities (composer audit) and a scan of its source for malware and web-shell signatures. Each runs once. A malware detection fails the version outright.

Security results
Tool Status Findings Summary
Composer audit Pass 0
Malware scan Pass 0
License
OSL-3.0
Authors

More from imi

View vendor
Make it pay

Turn an existing module into recurring revenue.

If you already maintain a Magento 2 module on GitHub or GitLab, listing it on Packagento takes about five minutes. We mirror your tags, handle distribution signing, and route paid licenses through Stripe Connect, so you can keep shipping the way you already do.