Hi All,
I’ve searched the forums for this and can’t seem to find anything recent. I’m seeing a lot of spam registrations on one of my installs and I want to add cloudflare turnstile or recapture. I found recapture docs but it seems that is only related to the discussion forums and not general registration?
I’m surprised that there isn’t any easy to find off the shelf solutions to enable stopping bot registration. Is there a plugin somewhere that I’m missing?
Thanks
As far as I know, Open edX does not currently provide a built-in CAPTCHA solution for the standard learner registration page. The reCAPTCHA documentation you found is mainly related to the Discussions service and does not protect general account creation.
I don’t have any experience with Cloudflare Turnstile, so I can’t comment on that approach.
One built-in option you may want to look at is REGISTRATION_EMAIL_PATTERNS_ALLOWED. This setting allows you to restrict account creation to specific email domains using regular expression patterns. Depending on your use case, it can help reduce unwanted registrations by limiting signups to approved domains.
Open edX also includes registration rate-limiting settings (REGISTRATION_RATELIMIT and REGISTRATION_VALIDATION_RATELIMIT), which may help reduce automated account creation attempts.
If your platform is open to the public and learners can use a variety of email providers, restricting email domains may be too limiting. In that case, a CAPTCHA-based solution such as reCAPTCHA or Turnstile would likely be a better fit. Hopefully others in the community who have implemented Turnstile or similar solutions can share their experience.