> ## Documentation Index
> Fetch the complete documentation index at: https://docs.raykoi.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Managed CAPTCHA

> Real bot protection with one toggle — no provider account, no site key.

<Info>
  Requires the **Starter plan or above**.
</Info>

Every other CAPTCHA option ([Turnstile](/essentials/captcha/turnstile), [hCaptcha](/essentials/captcha/hcaptcha), [reCAPTCHA v3](/essentials/captcha/recaptcha)) means creating your own account with that provider, registering a site, and pasting two keys into Raykoi. Managed CAPTCHA skips all of that — flip on **CAPTCHA** in the form's **Spam Protection** settings, don't connect a provider, and Raykoi verifies submissions using its own hCaptcha keys behind the scenes.

## When to use which

<CardGroup cols={2}>
  <Card title="Managed" icon="toggle-on">
    You want protection turned on today, don't care which specific provider handles it, and don't want an account with a third party.
  </Card>

  <Card title="Bring your own keys" icon="key">
    You already use Turnstile/hCaptcha/reCAPTCHA elsewhere, want your own provider-side analytics/dashboard for this form's traffic, or need a specific provider for compliance reasons.
  </Card>
</CardGroup>

## Setting it up

<Steps>
  <Step title="Open Spam Protection settings">
    From your form's settings, find **Spam Protection**.
  </Step>

  <Step title="Turn on CAPTCHA">
    Toggle it on. Don't select or connect a provider — leaving it unconnected is what makes this Managed rather than bring-your-own-keys.
  </Step>

  <Step title="Choose a widget mode (optional)">
    Same `invisible`/`checkbox` choice described on the [Turnstile](/essentials/captcha/turnstile) page — invisible by default.
  </Step>
</Steps>

That's it — no keys to copy, no third-party dashboard to configure. The SDK and `submit.js` acquire a token exactly the same way they would for a self-managed hCaptcha integration; from your integration's perspective, Managed and bring-your-own-keys hCaptcha are indistinguishable.

## If you later connect your own provider

Linking a Turnstile/hCaptcha/reCAPTCHA integration to the form takes over immediately — Managed mode only applies when no integration is linked. There's no conflict between the two; connecting one is a strict upgrade from Managed, not a separate toggle you also need to turn off.