{"id":3687,"date":"2026-04-20T13:34:00","date_gmt":"2026-04-20T13:34:00","guid":{"rendered":"https:\/\/www.captcha.eu\/?p=3687"},"modified":"2026-04-20T14:02:45","modified_gmt":"2026-04-20T14:02:45","slug":"keycloak-recaptcha-alternative","status":"publish","type":"post","link":"https:\/\/www.captcha.eu\/de\/keycloak-recaptcha-alternative\/","title":{"rendered":"Keycloak reCAPTCHA Alternative f\u00fcr europ\u00e4ische Teams (2026)"},"content":{"rendered":"\n
\"Keycloak
captcha.eu<\/figcaption><\/figure>\n\n\n\n

Keycloak ships with reCAPTCHA built into its registration flow. For European organisations, that default creates cookies, US data transfers, and a privacy documentation burden on the three flows that matter most: login, registration and password reset. This guide explains how to replace reCAPTCHA in Keycloak with a cookieless, EU-hosted alternative and walks through the exact configuration for each authentication flow.<\/p>\n\n\n\n

<\/path><\/svg><\/span><\/span>Estimated reading time: <\/span>14<\/span> minutes<\/span><\/p>\n\n\n\n

\n
Try CAPTCHA.eu free – no credit card<\/a><\/div>\n\n\n\n
View all integrations<\/a><\/div>\n<\/div>\n\n\n\n
\n\n\n\n

At a Glance<\/h2>\n\n\n\n
\n

The core problem<\/strong><\/strong><\/h3>

Keycloak’s built-in reCAPTCHA sets the _grecaptcha cookie, routes verification through Google infrastructure, and creates ePrivacy consent questions on your most sensitive authentication flows.<\/p><\/div><\/div><\/div><\/div><\/div>\n\n\n\n

Why auth flows are different<\/strong><\/strong><\/strong><\/strong><\/strong><\/h3>

Login, registration, and password reset are pages users must complete before they can access anything. Third-party dependencies here carry more compliance and security weight than on a standard contact form.<\/p><\/div><\/div><\/div><\/div><\/div>\n\n\n\n

The practical fix<\/strong><\/strong><\/strong><\/strong><\/h3>

A proof-of-work CAPTCHA plugin installed as a JAR: no cookies, no US transfers, no cookie-consent layer for the CAPTCHA itself, with a much simpler third-party review profile, and configurable per Keycloak flow in under an hour.<\/p><\/div><\/div><\/div><\/div><\/div>\n<\/div><\/div>\n\n\n\n

\n\n\n

What this guide covers<\/h2><\/div>