reCAPTCHA

Hello, I’m having issues with https://www.google.com/recaptcha/api/siteverify. I’m calling this via cUrl from a php laravel app. I’m using php 8.3Here is the cUrl function which I’m using$captchaResults = Utility::curlCall( 'https://www.google.com/recaptcha/api/siteverify', 'POST', $captchaParams);public static function curlCall( $url, $type = 'GET', $arguments = [], $encodeData = false, $returnHeaders = false) { $type = strtoupper($type); if ($type == 'GET') { $url .= '?'.http_build_query($arguments); } $curl_request = curl_init($url); if ($type == 'POST') { curl_setopt($curl_request, CURLOPT_POST, 1); } elseif ($type == 'PUT') { curl_setopt($curl_request, CURLOPT_CUSTOMREQUEST, 'PUT'); } elseif ($type == 'DELETE') { curl_setopt($curl_request, CURLOPT_CUSTOMREQUEST, 'DELETE'); } curl_setopt($curl_request, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_0); curl_setopt($curl_request, CURLOPT_HEADER, $returnHead

Hi, I need help. Google is probably blocking my public IP address for recaptcha verification.I've already checked my browser and firewall and AV.After changing the gateway address to a different public address, recaptcha works correctly on the hosts.How do I report my public IP being added to the google whitelist?Best regards,Sławomir H

Hello,I am probably not the only one receiving a mail that starts as follows:“”Earlier this year, we informed you about the upcoming migration of all Google reCAPTCHA keys to Google Cloud projects by the end of 2025.We're now reaching out to inform you that your reCAPTCHA keys are eligible for migration.“”So far I have a website where people can “register” and “log in” - and as some extra check I have added a free reCAPTCHA.Now I do simply not understand what that mail wants to tell me! Except: If you become a paying customer, we can offer you tons of fancy features in the future. Ok, that is obvious.However what I do NOT read: If you just want to continue a free reCAPTCHA in your website login, do the following… etc.So my question is: Is there such an option at all? Or is the message basically telling me that in the future I will have to either drop that reCAPTCHA or pay for it?Thanks for any helpful answer, and best regards,cobo

I have had Recaptcha on our ecommerce website for a few years without problem. I have identical site themes (Kallyas) hosted on the same server which all work well, but one site the Recaptcha has suddenly stopped working. Recaptcha is built into the theme so just have to input the key and secret key.The site theme, Wordpress and plugins are all up to date, I've created new keys multiple times, and tried V2 and V3, and have disabled all plugins but no avail. I hadn't made any changes to the site and suddenly both forms on the site started displaying "ERROR for site owner: Invalid site key".  My hosting company (Brixly) and domain registrar (Fasthosts) have no idea and believe the fault lies with google. Does anyone have any idea what to try next as I'm totally stumped.  Many thanks!

I currently have ten (10) websites that use reCAPTCHA v2. I received the email inviting me to migrate sites to GCP. When I clicked through, I arrived at a page that listed five of my sites in a table with “Key Name”, “Type” and “Site ID” as headers (and a check box at the beginning of each row). Above that table was a drop-down select menu labeled “Project Name,” with two OTHER sites available as options. Each sites should either be a Project or a Site, in my opinion, not one or the other (and there’s no obvious way to organize my portfolio into “Projects” or “Sites” anyway).It’s entirely unclear what selecting a project from the drop-down menu (and why are not ALL of my sites in that menu?) versus checking or unchecking the sites listed in the table will do and what will happen when I click “Submit.”It feels as though there is some error in the migration process or some other automated process that is seeing two of my sites differently from the other five that are currently recognized

I'm using React Native (iOS) and Firebase Phone Authentication.At one point, I enabled reCAPTCHA Enterprise from the Firebase Console via:Authentication -> Phone -> App verification -> Enable reCAPTCHA EnterpriseAfter that, phone number auth started triggering reCAPTCHA verification. Later, I disabled reCAPTCHA Enterprise in the console, but Firebase still behaves as if it's enabled. Even though appVerificationDisabledForTesting = true is set in development, production builds continue showing this error:'auth/unknown', '[auth/unknown] The reCAPTCHA SDK is not linked to your app. See https://cloud.google.com/recaptcha-enterprise/docs/instrument-ios-apps'

I have legacy reCAPTCHA v2 and v3 keys in use across a number of websites. I’ve received the notification that my keys are eligible for migration to Google Cloud.Since I set up these keys, I’ve started to consolidate my web development on a separate Google account for work purposes. So, ideally, I’d like migrate my legacy keys to a Google Cloud project associated with a different Google account than the one that the legacy keys are associated with. I’d also like to continue to use the legacy endpoints for now.Is it going to be possible to achieve these aims through manual migration?

I’m trying to see what the damage is going to be now the Google is going to be charging for reCAPTCHA (so I can plan to bill my clients), and the calculator isn’t working.  Worse, it’s telling me I can’t link a billing account because I don’ t have access.  It’s my only Google account.Any ideas?

Hello everyone, I just recieved an email from google regarding my recaptcha keys being elegible for migration to a google cloud project. I migrated the only recaptcha key I’ve got a few months ago. I’m guessing this is an automatic email and nothing will happen but the email also says this and it kinda worries me that somehow it creates another project for the key or something like that: Option 2: Allow for automatic associationIf you take no action within 90 days of receiving this communication, your keys will automatically be associated with a Google Cloud project. You’ll be notified when the process is complete Thanks in advance!

I just migrated the remaining reCAPTCHA keys to Google Cloud. However one of them has gone into the wrong project.How do i move the key to a different project?Thanks

Hi. Ich habe eine Mail bekommen das wohl etwas kostenpflichtig wird. Ich kann kein Englisch und verstehe es nicht. Im Dashboard finde ich auch nicht um was es im schreiben geht. Ich möchte das nicht und will es abmelden, kündigen, nicht umziehen. Bitte um Hilfe  

Some users are complaining that the reCAPTCHA keeps loading continuously when the page is accessed through Instagram's in-app browser. We switched the reCAPTCHA to invisible, but the request to generate the token is never completed.Browser:Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/21F90 Instagram 349.1.11.46.85 (iPhone11,8; iOS 17_5_1; pt_BR; pt-BR; scale=2.00; 828x1792; 643271179; IABMV/1)

We have integrated enterprise version of google recaptcha into our site , generated the keys for the same. Registered the domain name while creating the keys. however, while captcha gets rendered on the page, getting an error of "ERROR for site owner: Invalid key type for enterprise key."We haven't enable pricing for this enterprise version because the usage wouldn't go beyond 1million so billing wont be needed. I wonder would this be a reason for getting this error? 

Hello everyone,I am using WordPress with the Avada theme and have several Avada Forms on a single page, each using Google reCAPTCHA v2 (checkbox).Problem:Only the first form on the page works correctly. When I try to submit any additional form on the same page, I get this error message:"There was an error trying to send your message. Please try again later."If I remove the reCAPTCHA field from the additional forms, the forms submit without any problem. So it seems that multiple v2 checkboxes on one page are conflicting.What I’ve checked so far: Site key and secret key are correct. Domain is properly registered in the reCAPTCHA console. No caching/firewall rules are blocking reCAPTCHA. With only one form per page, everything works fine. My questions: Is it possible to use multiple reCAPTCHA v2 checkboxes on a single page with Avada? If yes, do I need to manually initialize them using grecaptcha.render()? Is there an official best practice for implementing this setup with multi

We are currently using a reCAPTCHA v3 Classic key for form submissions in our application. As per Google's recommendation, we are planning to migrate this key to the Google Cloud Platform (GCP).Before proceeding, we would like to clarify the following questions:Our current implementation references the script:https://www.google.com/recaptcha/api.js After migrating the Classic key to GCP, is it mandatory to update this reference to:https://www.google.com/recaptcha/enterprise.js? If we continue using the existing api.js reference after the migration, will the integration remain functional? Will the existing site key value change after migration? Or will the same key continue to be used? Will there be any change in the format or structure of the key itself (e.g., length, prefix) after the migration to GCP?

The reliability and accuracy of Webrisk API response is going bad and out of sync with the response to the malicious urls when browsed on the chrome.Is there any plan or initiative to address these issues?

I'm using React Native (iOS) and Firebase Phone Authentication.At one point, I enabled reCAPTCHA Enterprise from the Firebase Console via:Authentication -> Phone -> App verification -> Enable reCAPTCHA EnterpriseAfter that, phone number auth started triggering reCAPTCHA verification. Later, I disabled reCAPTCHA Enterprise in the console, but Firebase still behaves as if it's enabled. Even though appVerificationDisabledForTesting = true is set in development, production builds continue showing this error:'auth/unknown', '[auth/unknown] The reCAPTCHA SDK is not linked to your app. See https://cloud.google.com/recaptcha-enterprise/docs/instrument-ios-apps'

I encountered a problem about Google reCAPTCHA access.I created a new site-key for reCAPTCHA on Android and obtained a token.Now the problem is on the PHP server. When I verify the token, I get an error message: ACCESS_TOKEN_SCOPE_INSUFFICIENT.I tried many ways to handle it, but it still gives an error message. Please help me solve it.Detailed error message:CreateAssessment() call failed with the following error: Google\\ApiCore\\ApiException: {"reason": "ACCESS_TOKEN_SCOPE_INSUFFICIENT","domain": "googleapis.com","errorInfoMetadata": {"service": "recaptchaenterprise.googleapis.com","method": "google.cloud.recaptchaenterprise.v1.RecaptchaEnterpriseService.CreateAssessment"},"message": "Request had insufficient authentication scopes.","code": 7,"status": "PERMISSION_DENIED","details": [{"@type": "type.googleapis.com\\/google.rpc.ErrorInfo","reason": "ACCESS_TOKEN_SCOPE_INSUFFICIENT","domain": "googleapis.com","metadata": {"service": "recaptchaenterprise.googleapis.com","method": "google

"We are from a renowned security company, and we need to protect our clients' emails in our cloud security product. We attempt to click on URLs within these emails as part of this process. However, sometimes these URLs are protected by reCAPTCHA, which prevents us from accessing the content. We would like to know if there is a way for our company to contact reCAPTCHA to provide our IP addresses so that we can avoid encountering reCAPTCHA, thereby better protecting our clients."

I’m trying to integrate reCAPTCHA v3 with a Cloud Run backend. The client gets a token successfully, but when I verify it server-side using the reCAPTCHA API, I get a low score or timeout error.

We are sending the complete body as the documentation explain.We are trying to send verification code to phone number using sendVerificationCode endpoint. But got "Recaptcha verification failed - MALFORMED". we are sending the complete body as the documentation explain. Actually I am doing this:1- Call  https://identitytoolkit.googleapis.com/v1/recaptchaParams2- Call https://identitytoolkit.googleapis.com/v1/accounts:sendVerificationCode with the recaptcha token of the first enpoint call.The body: "phoneNumber": string, "recaptchaToken": string, Then i get this error: "CAPTCHA_CHECK_FAILED : Recaptcha verification failed - MALFORMED" Are we missing something? Thanks

Loading a page with recaptcha on Safari for iOS 16 and above, (es. user agent Mozilla/5.0 (iPhone; CPU iPhone OS 16_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1) the request https://www.google.com/recaptcha/api2/pat returns 401 and recaptcha initialization fails.Additional details can be found in this Github issue https://github.com/google/recaptcha/issues/561 (49 upvotes), but I ask the participants to comment here too.

Hello Learners,  Have you ever wondered if there was a robot on the other side of the conversation? Or maybe if a robot is trying to access your content. Products like reCaptcha provide the fraud and bot protection that is critical in a world of scaling attacks on cloud resources. So please spend some time learning more about reCaptcha with our new course "Introduction to reCaptcha" which is now available on Google Cloud Skills Boost. In this course you can spend time learning the foundations of reCaptcha before working through a detailed lab that includes a blended use of Cloud Armor for bot protection. Whether you are a developer looking to sharpen up on reCaptcha for your app or perhaps a security expert who needs to get deeper context on what exactly recCaptcha can do for you in the enterprise, drop in our new course.  Course Details & LINK: "This course equips learners with the information they need to deploy reCAPTCHA in their websites, mobile ap

 I was wondering: if I refresh the web site page and recaptcha widget loads multiple times, does that increase my usage count? Or does the count only go up when I send the token to google server for verification?"

Hi,I created a website through Webflow web builder. I have used reCAPTCHA (v2) for my submission form. The site has been live for 2 weeks, and am able to receive submission forms.I received an email today from Google Cloud saying "You aren't protected". (snip below)In my Google Cloud console, the status reads - Unprotected: Finish setting up your key: Request scoresTo fully protect your site or app, finish setting up your key. Your key is requesting tokens (executes), but isn't requesting scores (assessments).I clicked "request scores" but this refers to code, which I don't have experience using/ implementing.Any assistant would be gratefully received to make status - Protected.Thanks