Public forms are a magnet for bots, so Rock includes CAPTCHA to confirm a real person is on the other end and keep spam and fraudulent submissions out of your data. There is nothing to sign up for: Rock ships with a self-hosted CAPTCHA that uses Proof of Work challenges, so it guards against large-scale bot attacks without any third-party account or keys. Pick your Captcha Mode - Go to Admin Tools > Settings > System Configuration and select UI Settings, where you choose among the three Captcha Modes that apply to every Captcha-enabled block. It is already working - Blocks like Workflow Entry and Transaction Entry v2 run a Captcha check automatically when they load, often behind the scenes so the person never has to check a box.Turn it off where you do not want it - Captcha is on by default; disable it for a specific block in that block's settings. See Configure Captcha and Use Captcha for the modes and the full list of supported blocks.