# Settings

ALTCHA Cloud's default settings are sufficient for most users, but you can adjust several configuration options in the site's **Settings** tab.

## Basic Settings

- **URL**  
The URL address of the website, used to identify the site.

- **Protection Level**  
Sets the strength of the protection using three levels: **Relaxed**, **Normal**, and **Strict**. Adjusting this option primarily increases the proof-of-work (PoW) complexity and strengthens other automatic protection features.

## Advanced Settings

- **Proof-of-Work Algorithm**  
Changes the PoW algorithm. Defaults to `PBKDF2/SHA-256`, which is the recommended algorithm and requires no additional widget configuration. If you select `ARGON2ID`, you must [register the ARGON2ID worker](/docs/integration/widget/#adding-argon2--scrypt-workers-vite) in the widget.

- **Code Challenge**  
By default, ALTCHA Cloud uses `Adaptive` CAPTCHA, meaning most legitimate users pass verification without an interactive code challenge, while users with an elevated risk score are challenged with interactive code verification. You can disable code verification entirely by setting this option to `Off`, or enforce it for everyone by setting it to `On`.

- **HIS (Human Interaction Signature)**  
For added protection, enable HIS (Human Interaction Signature), which detects automated environments and bots based on user interactions. Note that this feature may not fit every use case — see the documentation for more details.

- **Allowed Origins**  
Restricts the challenge and verification API to the listed HTTP origins (e.g. `https://example.com`). Configuring allowed origins is a recommended security practice.