reCAPTCHA

Hello guys! Got a few questions regarding the new reCAPTCHA changes done by Google.I did receive the email "We’re writing to inform you that all Google reCAPTCHA keys will need to be migrated to a Google Cloud project by the end of 2025..." as most of you probably already did.So far based on my research I am aware of the following, but you can confirm my questions please: 1. The existing V2 Checkbox, V2 Invisible and V3 keys will continue to work even after this change, however, Google is not specifying is they will automatically migrate the keys themselves, or what happens if the user does not migrate all the keys.  Will they still be available/working on the sites used? From my understanding, they are suggesting to migrate otherwise, the sites may loose protection if the reCAPTCHA service surpasses more than 10.000 requests

I’m trying to integrate reCaptcha v 3 into our checkout page. It seems that no matter what I do the call to grecaptcha.enterprise.execute is always returning a token of 0.Here is the button event: function OnCCCard(e) {            e.preventDefault();            grecaptcha.enterprise.ready(async () => {                console.log('Getting Token');                const token = await grecaptcha.enterprise.execute('MyKey', { action: 'checkout' });                console.log('Got Token:' & token);            });        }No matter what I try the second console.Log always says : “Got Token: 0”I’m not sure what I’m doing wrong. 

Hi, We are in the process of setting up Google reCAPTCHA and are facing an issue related to URL filtering on our Palo Alto firewall. We created URL filtering rules to allow only recaptchaenterprise.googleapis.com, but reCAPTCHA is still not functioning as expected. During troubleshooting, access began working immediately after we removed the URL filtering restrictions, which confirms that the firewall had been blocking one or more additional Google domains required for reCAPTCHA validation. However, when we re-enabled the URL filtering policy and permitted only recaptchaenterprise.googleapis.com, the issue returned. This indicates that reCAPTCHA Enterprise relies on multiple backend Google domains, and allowing just this single URL is not sufficient for the complete validation workflow. To fully restore functionality, we may need to allow the complete Google reCAPTCHA domain set as recommended by Google, instead of permitting only a sing

Hi.I have three questions.①The email from Google Cloud said:“If you do not take action within 90 days of receiving this notice, your keys will automatically be associated with your Google Cloud project.”Even after 90 days have passed, they have not been automatically associated with a Google Cloud project.When will this happen? Did that notification have any meaning?②The email stated, “You will receive a notification when the association process is complete.”When the association is finished, will a notification be sent to the same address specifying which domain the process has been completed for? ③I understand that billing will begin with the month in which we exceed the free tier.Will the billing statement be sent by email or by postal mail?

Dear sirs:Some months ago I received an email from you telling me that my Google recaptcha keys were eligible for migration in a Google Cloud project.You also tell me that my average recaptcha monthly use is of 3 evaluations in three months.I suppose that this has a cost so in that case I wouldn't be interested in using recaptcha in my Wordpress anymore.What should I do to quit using recaptcha aside deleting it from my site?.Thank you very much in advance.Greetings,Eva

We’ve received your communication regarding the upcoming migration of reCAPTCHA keys from Classic to Google Cloud projects. We’d like to understand a few details to plan this transition smoothly for our customer and application environments.Could you please confirm if there are any changes in the billing model or pricing once the keys are migrated to Google Cloud? What kind of production or service impact can be anticipated during or immediately after the migration process? Is there any downtime expected or a recommended maintenance window for performing the migration? Will the existing API endpoints, site keys, or secret keys continue to work post-migration, or do we need to update configurations on our applications? Are there any new permissions or IAM roles required on the associated Google Cloud project to manage reCAPTCHA?

Hi All ,    1 - We have 6-7 keys in old V2 admin console. We created a new google cloud project on the cloud console lets say “Cloud Project 1” . But on the old admin console, when we try to migrate the key to cloud, in the drop down we do not see the “Cloud Project 1”. We want to migrate our keys to this google cloud project, how can we ? 2 - By default it says “My project 5891” (this in in old, in cloud we do not have this project yet) , so if it try to migrate the key to this project, even after 2-3 mins nothing happened, it says some technical issue. This may be a temporary issue but just in case if any one has any idea for this. So we assume when we do this, a new project in cloud will be created with “My Project 5891”.3 - Our main goal is to migrate the keys to “Cloud Project 1” which was created in google cloud, so how can we migrate from old to new in this project ? Any settings needed in this project so that we can see it in the old consol

Hello Google reCAPTCHA Team,We’re a psychotherapist running a solo practice in Poland and we need official confirmation about reCAPTCHA data retention periods for our privacy policy compliance with GDPR.Could you please provide official information about:1. How long does Google retain data collected by reCAPTCHA v2 and v3?2. Is the 30-day retention period mentioned in some sources accurate?3. Where can I find the official documentation for these retention periods?This information is crucial for my GDPR compliance documentation.Thank you for your assistance.

We have 7-8 keys. In terms of cost effectiveness for billing as we would like to keep the billing minimum-1 - Is the 10 K limit at project level ? meaning 10K free allowed for for one project separately in google cloud or 2 - Is it for billing account (one credit card) where one billing account can be mapped for 2-3 different projects ? 3 -Basically if its at google cloud project level (irrespective of one billing account or 7 different billing accounts), then can we create 7 different google cloud projects in the same account for 7 keys with same / different billing accounts and have 10K quota for each project and key ? Basically trying to understand what’s allowed and what will save the cost for us.4- Like if 7 keys, 7 different projects, 7 billing accounts - what happens here ? only 10 K free quota or 70K free quota5 - If 7 keys, 7 different projects, 1 billing account , what happens here ? only 10 K or 70K free quota 

We have 7+ v2 classic [checkbox] keys, we got email that our keys will be automatically migrated or we can manually.We have below queries, appreciate if you can provide inline answers for all of them. There seems some confsion w.r.t needing code changes, billing etc post migration.If we manually migrate v2 (checkbox) to cloud v2 (checkbox) , it is said that no code change andwe can continue to use siteverify api. Questionsa) But after migration if our usage goes above 10000 like 150000, then what, will we be charged or not ?b) Will our siteverify api stop working and give error if more hits more than 10000 ?c) If it will give error, then how can we enable billing ? will it be enabled by default when we manually migrate orautomatically migrate ?d) What if we do not enable billing and if our v2 checkbox/invisible migrated to cloud and usage more than 10000 ?e) What if we do not enable Enter

Hello Google Cloud Support Team,I am experiencing a critical issue with my web application (tasleemai.com) where users are consistently failing to generate a reCAPTCHA Enterprise Token, which is blocking the registration process.Details: Affected Key (Site Key ID): 6LeaPgE... (Tasleem AI key) Domain: https://tasleemai.com (The site is now correctly enforcing HTTPS). Frontend Error: The browser console displays the error: Error: فشل في إنشاء رمز reCAPTCHA. which translates to "Error: Failed to create reCAPTCHA token." Key Metric Evidence: No scores or metrics are visible in the reCAPTCHA Enterprise dashboard for this key , confirming that the client-side API call (grecaptcha.enterprise.execute) is not successfully connecting to the Google service.

Hello.I submitted this question to Google Cloud's contact form, but the quote was avoided, so I'm posting it here.I apologize for the inconvenience, but could you please confirm the following?I'm currently using reCAPTCHA with a free quotation of 10,000 instances on a site I manage.I would like to use the same free quota on other sites, so I plan to create a project and billing account on Google Cloud Platform for each site on which I will implement reCAPTCHA.I just want to confirm: if I create billing accounts with the same credit card, will the free quota for reCAPTCHA be separate for each billing account?Also, will the billing information be separate?Thank you for your support.

We manage more than 100 classic V2 and V3 reCaptcha keys on https://www.google.com/recaptcha/admin.  We have already manually transferred some of these to Google Cloud Console.For example:- We manually migrated the reCaptcha keys from clientsite1.com to a new project called “clientsite1” in Google Cloud Console.- We manually migrated the keys from clientsite2.com to a new project called “clientsite2” in Google Cloud Console.- We manually migrated the keys from clientsite3.com to a new project called “clientsite3” in Google Cloud Console.And so on.But this is an impossible task because we manage a total of 150 domain names for all our customers.When Google migrates the remaining classic reCaptcha keys to Google Cloud Console at the end of this year, how will Google decide which project they will all go to?  - Will they all end up in one new project in Google Cloud Console? - Or in an existing project? - Or will eac

Dear sirWe’re writing to inform you that all Google reCAPTCHA keys will need to be migrated to a Google Cloud project by the end of 2025. This will unite all reCAPTCHA customers under a single set of terms, a consistent pricing structure, and provide access to advanced security features.We’ve provided additional information below to guide you through this change.What you need to doWe will apply the change in phases throughout the year, reaching out again by email when your keys become eligible. At that time, we will automatically create a Google Cloud project for you and associate your keys to it.However, we recommend that you get ahead of this process by following these instructions to manually migrate from reCAPTCHA Classic. This way you will be able to prescribe exactly which Google Cloud project you’ll associate with your key. Once you complete this process, the following features will be enabled immediately via Google C

We are an e-commerce team currently facing persistent issues with Google reCAPTCHA v3 returning very low scores on iOS apps. This started recently and seems to correlate with Apple’s changes in iOS 26, where User-Agent strings are now frozen.Apple introduced User-Agent freezing in iOS 26, which reports incorrect OS versions (e.g., showing iPhone OS 18_6 instead of 26). This change is part of Apple’s privacy-driven signal reduction strategy. While it improves privacy, it can confuse device detection systems and potentially impact Google’s machine learning model for reCAPTCHA scoring, which relies on signals like user-agent for risk analysis.We’ve observed:Scores dropping below 0.4 primarily for iOS traffic.Questions for the community:Has anyone else experienced similar low-score issues o

I have a question regarding test keys. Do they count towards billable assessments? 

How can we make captcha better by signing in with the verification of pictures and things. In my opinion we should only l have a password. 

In this lab I am having problem with “Task 4 Create and deploy the reCAPTCHA session token and test site key”. I did every steps and successfully but when I click in “check my progress” I receive “Please configure the HTML files as mentioned in the instructions”… Who can help me please with 

We are trying to use recaptcha on a contact form on one of our projects, however we are encountering this message on submit: We're sorry, but your computer or network may be sending automated queries. To protect our users, we can't process your request right now. We tried different networks, using vpn and not using vpn, different computers and differnt device types (eg. mobile phone etc.), we also tried different keys, as well as enterprise Keys and V3 keys all of those tests lead to the same Error message.We´d appreciate any pointers on where we could debug furhter. 

Is there a way to make the images in ReCaptcha V2 accessible by keyboard?

Hello.I've a simple question about the billing of the reCAPTCHA.To clarify, the charge for the use of reCAPTCHA is only applicable after it is working in Google Cloud ?I mean, in the meantime I won't get billed if I get more than 10000 evaluations before the migration ? Thanks in advance.  

Last year I added the Wordfence plugin to my woocommerce/wordpress site to add a level of security to my online shop. I set up the reCaptcha V3 site key and reCaptcha v3 Secret via the Google console - It was a while ago, but it all worked and set up fine. I was just checking through settings today and in the google console I was prompted to migrate and switch to Google Cloud, so I did so and now my reCaptcha status is saying I’m unprotected and I have no idea how to resolve this.I don’t fully understand any of this, so if someone could help explain what I need to do to resolve this all and to protect my website, I’d really appreciate it.When I click on the word Unprotected, I get a popup saying the following with a link to ‘Request Tokens’ UnprotectedYour key isn't requesting tokensYour key was requesting tokens (executes), but isn't any more. Something is set up incorrectly in your

Hi there,Thank you for your time.I previously submitted this question through the contact form, but I haven’t received a response, so I’m posting it here instead.Sorry for the trouble, but I’d appreciate your help with the following questions:1. Free Usage of Google reCAPTCHAI understand that to continue using reCAPTCHA for free, billing must be disabled.Is it correct that if the number of assessments exceeds 10,000 per month, users can still access the site or app, but reCAPTCHA itself will stop functioning?2. Billing Information and SettingsWhen I checked the current billing information, I couldn’t find any details—it seems unclear.Could you please advise how to confirm the billing account details?Also, if a billing account does exist, I’d appreciate it if you could check whether billing is currently enabled.3. Assessment Volume and Free UsageWe currently

<meta charset="utf-8"><!--#include virtual="/includes/SendMail.asp"--><script src="https://www.google.com/recaptcha/api.js?render=blabla1"></script><!--#include virtual="/includes/aspJSON1.9.asp"--><% If (trim(Request.Form("SendEmail")) = "Yes") Then Name = Trim( [removed by moderator] ) Dim objXmlHttp Set objXmlHttp = Server.CreateObject("Msxml2.ServerXMLHTTP") url = "https://www.google.com/recaptcha/api/siteverify?secret=blabla2&remoteip=" & Request.ServerVariables("REMOTE_ADDR") & "&response=" & trim(Request.Form("g-recaptcha-response")) objXmlHttp.open "POST", url, False objXmlHttp.setRequestHeader "Content-Type", "application/json" objXmlHttp.send() Set oJSON = New aspJSON oJSON.loadJSON(objXmlHttp.responseText) if oJSON.data("success") then strSu

We have ReCAPTCHA enterprise and have integrated with ReCAPTCHA v3 in our online application. Since about two weeks ago, ReCAPTCHA has been giving low scores, i.e. below 0.5, to a lot of our online users which prevented them from logging into their accounts. The number of low scores has increased by fivefold as compared to a couple of weeks ago, and is still in a trend of increasing.Could you advise what might be the reason behind this, given we haven't made a change to our ReCAPTCHA implementation?