GETTING STARTED

Protect your website in under 10 minutes

A complete walkthrough from account creation to live bot protection — no prior experience needed.

Create account

Get API key

Install

Set protection

Test

Done

Create your Crytify account

Free — no credit card required

a Go to https://dashboard.crytify.com/register
b Enter your name, email address, and a password
c Check your inbox for a verification email from Crytify and click the confirmation link
d Log in — you'll land on your dashboard

The free plan includes 10,000 requests/month — more than enough to get started and test the integration.

Create an integration key

This connects your website to Crytify

a In the dashboard, click "Integration" in the left sidebar
b Click "Create API Key"
c Give it a descriptive name, e.g. "My Online Store"
d Copy the full key and save it somewhere safe (a password manager or a text file)

Important: The full key is only shown once, immediately after creation. If you lose it, you'll need to create a new one.

Install Crytify on your website

Choose your platform

The easiest approach — one file, nothing to install or configure.

Step 1 — Download the file

curl -o crytify.php "https://crytify.com/download/crytify.php"

Or download directly and upload it to your website folder.

Step 2 — Add two lines to each protected page

<?php
require_once __DIR__ . '/crytify.php';

crytify_gate('cry_live_YOUR_KEY_HERE');

// Your existing page starts here
?>

Replace cry_live_YOUR_KEY_HERE with the integration key you copied in Step 2.

Protect your entire WordPress site by adding a few lines to functions.php.

Step 1 — Upload crytify.php

Download crytify.php and upload it to /wp-content/ via FTP or your hosting file manager.

Step 2 — Open WordPress Admin → Appearance → Theme File Editor → functions.php

Alternatively, use the "Code Snippets" plugin — safer and easier to manage.

Step 3 — Paste this snippet

// Crytify bot protection
add_action('init', function() {
    if (!is_admin()) {
        require_once WP_CONTENT_DIR . '/crytify.php';
        crytify_gate('cry_live_YOUR_KEY_HERE');
    }
});

The !is_admin() check keeps WordPress admin pages unaffected.

Available as a Python package with a decorator for Flask, middleware for Django, and an ASGI factory for FastAPI.

Install

pip install crytify

Flask

from crytify import crytify_gate

@app.route('/checkout')
@crytify_gate('cry_live_KEY')
def checkout():
    return render_template('checkout.html')

Django

# settings.py
MIDDLEWARE = [
    'crytify.CrytifyMiddleware',
    ...
]
CRYTIFY_API_KEY = 'cry_live_KEY'

FastAPI

from crytify import crytify_fastapi

app = crytify_fastapi(
    'cry_live_KEY',
    original_app
)

Call the Crytify REST API directly from your Node.js or Express application.

Express middleware

const crytify = async (req, res, next) => {
  const r = await fetch('https://api.crytify.com/v1/trust', {
    method: 'POST',
    headers: {
      'Authorization': 'Bearer cry_live_KEY',
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({
      ip: req.ip,
      path: req.path,
      method: req.method,
      user_agent: req.headers['user-agent']
    })
  });
  const { decision } = await r.json();
  if (decision === 'BLOCK') return res.status(403).send('Forbidden');
  next();
};

app.use('/checkout', crytify);

Next.js middleware

// middleware.ts
export async function middleware(req) {
  const r = await fetch(
    'https://api.crytify.com/v1/trust',
    {
      method: 'POST',
      headers: {
        Authorization: 'Bearer cry_live_KEY',
        'Content-Type': 'application/json',
      },
      body: JSON.stringify({
        ip: req.ip,
        path: req.nextUrl.pathname,
        method: req.method,
        user_agent: req.headers.get('user-agent'),
      }),
    }
  );
  const { decision } = await r.json();
  if (decision === 'BLOCK')
    return new Response('Forbidden', { status: 403 });
}

Choose your protection level

How aggressively should Crytify protect your site?

In the dashboard, open "Protection" and choose one of the three levels:

Easy Great for starters

Blocks only clearly malicious bots. Genuine visitors are never affected.

Best for: blogs, portfolios, small shops

RECOMMENDED

Medium

Balanced — suspicious traffic gets a verification step; real users pass straight through.

Best for: e-commerce, login pages, checkout

Hard Strictest

Blocks anything suspicious. Designed for highly sensitive pages.

Best for: internal APIs, admin panels, payment endpoints

You can switch protection levels anytime from the dashboard — no code changes needed.

Test — make sure everything works

Verify before going live

a In the dashboard, open "Test Protection" from the sidebar
b Enter an IP address or URL and click "Run test"
c You'll see a result: Allow, Challenge, or Block
d Open your protected page in a browser — if it loads normally, the integration is working

Real visitors are never blocked. Only bots and suspicious traffic get blocked or challenged.

Your website is now protected!

Crytify is now actively guarding your website 24/7. From your dashboard you can monitor all activity in real time.

Monitor traffic

Open Traffic to see every visitor — who's real and who's a bot

View statistics

Open Analytics to see trends and how many bots have been blocked

Custom rules

Open Block Rules to block specific IPs, countries, or patterns

Open Dashboard

Frequently asked questions

Will Crytify block my real visitors?

No. Crytify is designed to distinguish real users from automated bots. At Easy or Medium protection, genuine visitors are never interrupted.

What happens when someone is Challenged?

The visitor sees a simple one-click verification page. After clicking "Continue", they access your website as normal. The process takes only a couple of seconds.

Will Crytify slow down my website?

Not noticeably. Crytify runs in under 50 ms and does not affect your page load time.

Do I need to change code if I switch protection levels?

No. Protection levels are managed from the dashboard — one change takes effect instantly across all protected pages.

What happens when I run out of credits?

Your website stays live. Crytify fails open — visitors are allowed through — until you top up your credits.

Need more detail?

API Documentation | View FAQ