reCAPTCHA

I have just upgraded my sites to reCAPTCHA V3 and the admin pages shows that I have Number of Requests as high as 1211 per day.  When I look on the Google Cloud console, it shows a count of 68 for the last 30 days under Protected Traffic.Based on the number of users I get to my site, the 68 number is more realistic.  I'm concerned I will hit the 10,000 limit based on the admin page.  I don't know where all these requests are coming from.Any help would be appreciated.Thanks

Since February 2025, reCAPTCHA v3 validation has stopped working on one of my websites, even though it was working perfectly from summer 2023 until February 2025. A client alerted me that they were unable to submit a form. Also note that I have other websites and reCAPTCHA works perfectly on them. I’ve checked all the usual points:✅ Correct version used (v3), keys properly placed✅ Domain correctly added in the reCAPTCHA admin console✅ Tested with different form plugins (Elementor + Fluent Forms)✅ Checked for possible conflicts (themes, plugins, updates)✅ No server-side blocking (curl test OK, no firewall issues)✅ Created several new keys on 2 different Google accounts → same issue: "Invalid key" or "Can not connect to the reCAPTCHA server (0)" At this point, I suspect a bug or soft-block on Google's side (maybe triggered by multiple key regenerations?), or possibly a doma

I attended a reCAPTCHA demo at Google Cloud Next, and it showcased how GCP reCAPTCHA protects websites from spam and abuse. It uses advanced risk analysis to detect bots, offering features like score-based assessments and mobile SDKs. The seamless integration with Google Cloud tools, like Cloud Armor, enhances security for high-traffic services. It’s a robust solution for enterprises.

Hi,I would like to migrate from V2 to Enterprise.However, I wouldn't like to get the score back, but to keep having the visible captch when needed.Is it possible?What should I change in the backend code?(currently querying https://www.google.com/recaptcha/api/siteverify and checking the success) 1 0 6

Once a key is created, I'm not finding how to add a domain to an existing enterprise key.I tried asking Gemini and providing it screenshots and it is stuck too, so I'm thinking this feature doesn't exist yet. If it does, please let me know where that is administered.

Hello,With the new Recaptcha dashboard, I am unable to generate the SECRET KEY and WEBSITE KEY to be entered on the Wordpress CONTACT FORM 7 plugin.Can you please help me out?Thank you very much.

Hi guysI have myproject v3 keys(pub and priv) and have myproject2 v3 keys(pub and priv)The problem is that when the "grecaptcha.executed();" instruction is executed, in the case when myproject v3 keys are used, a check for a fire hydrant(etc) appears on page if reCAPTCHA has the slightest doubt, but in same case with using myproject2 v3 keys - the check does not appear when working from the same browser and from the same tabDid according to docs# head<script src="https://www.google.com/recaptcha/api.js" async defer></script># body<div class="g-recaptcha"id="g-recaptcha"data-sitekey="{myproject v3 pub key}"data-size="invisible"># jsfunction execCaptcha(){try {    grecaptcha.execute();

Hi, My name is Futoshi Obata, compliance manager of a Japanese financial corporation. Our company is using your reCAPTCHA function for our login screen. On 6th February, the reCAPTCHA function was suddenly stopped. We guess the reason that our payment account did not pay the fee for the function. However, we cannot find the payment account because it was set by someone who has been resigned from our company several years ago. (Currently, we have set up a new payment account and the issue was fixed). We would like to find the payment account which might trigger the issue. Could you kindly find the payment account which caused the issue, please? If you need more information for the investigation, please let me know.

Is there a black list or something that flags specific IPs as bots even if they are not.  We are having issues with our employees getting blocked on all recaptcha sites.  I don't even know where to go with this.  It is able to reach recaptcha but we can't get much past that.  This of course means people keep retrying recaptcha over and over and over, causing the problem to be worse.  What do I need to do here?

Hello,I have a question about reCAPTCHA v3.I heard that reCAPTCHA must be migrated to Google Cloud Project by the end of 2025. So, I tried migrating reCAPTCHA but encountered an issue when creating a project.When I clicked the "Create a project panel" button, I was required to enter the following information:- Project Name- Organization- LocationI noticed that my company's information was already pre-filled in the Organization and Location fields. However, the websites registered with reCAPTCHA belong to a different domain than my company. (These websites are for a subsidiary company, so the domain is different.)In this case, can I still create a project and manage websites with a different domain?Thank you for your help.

Sorry, I can't even figure out where to post questions for Google reCaptcha Enterprise.  Please direct this where it should be. Thanks.I am trying to implement Google reCaptcha Enterprise. I am not new to coding but this is killing me. I program in C#, VB, JavaScript, .NET and others.  I cannot get a simple Test page to work and validate a checkbox.I would give you an example and errors, but I have tried 20 different ways. The closest I got was a 403 error on the assessment call.  I tried the .NET library, which looked VERY promising until I ran it and got an error about needing an environment Variable GOOGLE_APPLICATION_CREDENTIALS pointing to a file that I can find NO documentation on. What goes in it?It should be simple. I have jumped through the hoops, created a project, enabled the Enterprise API, I created an API key, granted access to localhost and my test domain. Can someone show me a SIMPLE sample that presents a checkbox and

hello setting up an opencart site, (did one years aho, same thing, just updated)opencart has a google recapcha plugin. Set up keys on recapcha site, plug in site id and key to plugin.....and site shows "ERROR for site owner: Invalid key type"recapcha site shows "Finish setting up your key: Request tokensTo protect your site or app, finish setting up your key. Start by requesting tokens (executes)."link to 'request keys' has pages of info which has nothing to do with what i was using, nor is there anything obvious about key types. I remember being able to choose v2 or v3 recapcha, but there appears to be no option for that..... so I am stumped.note. the plugin only has options for site ID and secret key, nothing else apart from a link to the recapcha page.

reCAPTCHA has over a decade of experience defending the internet and data for its network of more than 5 million sites. reCAPTCHA Enterprise builds on this technology with capabilities, such as two-factor authentication and mobile application support, designed specifically for enterprise security concerns. With reCAPTCHA Enterprise, you can defend your website against common web-based attacks like credential stuffing, account takeovers, and scraping and help prevent costly exploits from malicious human and automated actors. And, just like reCAPTCHA v3, reCAPTCHA Enterprise will never interrupt your users with a challenge, so you can run it on all webpages where your customers interact with your services. In this video, Program Manager Nick Troutini, provides reCAPTCHA Enterprise users the information and resources you need to quickly gain cloud security confidence, stay up-to-date with the latest product updates, and find support when you n

Check reCATPCHA v2, it has some type of configuration to accept IPV4 and IPv6.

Hello,I have reCAPTCHA enabled on multiple WordPress sites, and the forms are successfully submitting. However, after a period of inactivity (e.g., around 5 days without form submissions), the reCAPTCHA Key Status changes to "No Activity" or "Unprotected".When I submit the form again, the status changes back to "Protected".Could you please clarify:Is this behavior expected? Does the status change automatically due to inactivity?How can I ensure that the reCAPTCHA key remains "Protected" at all times, even if there is no form activity for several days?Thank you for your help.Best regards

For reCAPTCHA Enterprise v3 where is the disclaimer required? Is it sufficient to include a general disclaimer in the site's Terms of Service? Or does it need to be included in every page that it's integrated? If it does need to be included in every page, is it enough to put it at the bottom of the page or does it need to go as close as possible to the user action (as suggested by user flow here)?Appreciate any guidance on this issue.Emanuel

Hello,Please, I would like to confirm information that was not entirely clear to me about reCaptcha changes.With the migration to the new platform, will the old quotas currently announced in versions V2 and V3 (1000 calls per second or 1000000 calls per month) cease to exist?My website has more than 10000 monthly checks with version v2, so will I be required to activate billing?Is activating billing the same as using the Enterprise version?Thank you in advance.

Hi everyone,If you know anything about this phenomenon where the reCAPTCHA is cut off, please give us some advice.This mainly occurs on Android devices using Web View.

Hi everyone,I’m using reCAPTCHA v3 for bot detection, but recently, I noticed that about 26% of requests are flagged as suspicious. Today, a customer reached out saying he was wrongly blocked during registration despite being a legitimate user. I’d like to understand what could be causing these low scores and whether there are any effective remedies. For example, is it possible to implement a secondary verification step, such as falling back to reCAPTCHA v2 (image selection) when the v3 score is too low? Any insights or best practices would be greatly appreciated. Thanks!

I recently tried to upgrade from recaptcha v2 to v3 as my FE needs to call multiple API from BE and it's difficult to implement it via v2. I want all my BE calls to be secured by recaptcha token. So, chose V3 to not interrupt users. But I can see all the recaptcha tokens get verified without any issue event when I created 200 requests using chrome dev tools in incognito mode. I created 200 tokens using execute function and send the requests to the API. all of them verified successfully with score of 0.9. So, my questions are:Is that because I use localhost for testing? the behaviour might be different in production? Is v3 supposed to detect those sort of requests? automated via a script in dev tools?Is v3 is less secure in compare to v2 as there is no human interaction needed?Is there any other way to use version 2 for multiple API calls? but with one user challenge? Regards,Ali

Hello Everyone,We developed an application that has been using reCAPTCHA for over a year and started acting up stating the certificate is not valid. Even though the expiration date is until 2027 we had to refresh/retrieve a new certificate to get it working again, after that we noticed the fingerprint change, so I was wondering if anyone is aware of this issue.The problem happened 3 days ago and yesterday started happening again but now the fingerprint is the same, we've noticed the problem now is happening randomly in our site and doesn't seem to be an internal issue, more like a problem with reCAPTCHA.I would really appreciate any assistance or direction in the matter... ahead you will find the error thrown by our server:I/O error on GET request for "https://www.google.com/recaptcha/api/siteverify": com.ibm. jsse2. util. j: PKIX path building failed: com.ibm.sec

I'm a website tester for a promotions company and I am getting regularly blocked from submitting forms for our own campaigns? I seem to be the only person who has this problem at my company and the developers can't figure out why? When I hit submit I get the 'reCAPTCHA error.' return error. Has my I.P or email / mobile details been flagged with recaptcha or something? No idea how it works. But it's very frustratingly stopping me from working. Do I contact Google? Any help would be hugely appreciated. I'm quite willing to build a shrine to you.

Hi,I am new at using the Google recaptcha thing.First, I have to say that Google knows how to make things complicated!!! I cannot find my way around the recaptcha dashboard? It looks like a big mess to me.Anyhow, I have made some recaptcha keys for websites of mine. I am now trying to strengthen my website security after having been hacked over and over.The plugin in I am using asks for both the recaptcha main key and the security key. I seem to be able to find the main keys but I don't seem to have any access to the security keys?Do I need to start over or is there a way to find the security keys once having been made?If so, how?Thanks,John

If the Google reCAPTCHA v3 threshold is set to 0.5, users scoring below this are classified as bots. In such cases, a v2 challenge is presented. However, even after successfully solving the challenge, users are still blocked with the message "Miscellaneous activity. Please try again later." If the puzzle is completed and verified, why are users still unable to proceed?

Good morning.I'm using WordPress PlugIn Contact Form 7 and I have activated the reCAPTCHA v3 integration.I want to ask, through the Site Key or the Secret Key, is it possible to trace the Google account to which they are associated?I ask because by following the link to the reCAPTCHA Admin Console, (https://www.google.com/recaptcha/admin/create) I access the registration page of a new site and not an administration page of the site/domain already activated.How can I do? Is it better to remove the keys and do a new activation, so that I can know which Google account is actually used? I am sure that for the activation of the WordPress site reCAPTCHA key, I used the same WordPress administrator email address, but when I try to log in to Google Account Profile with that email, I cannot find any reference to the WordPress site with reCA