reCAPTCHA

 We're currently using Recaptcha Enterprise (score based) on a site. We're consistently seeing low scores (including 0) for legitimate traffic. For requests with low scores, we'd like to present a fallback puzzle. Is there a way to do this using the Recaptcha Enterprise product? Recaptcha V2 Invisible seems ideal for us. However, our organization is large and so it's possible we'd have over 100k assessments in a month. Is it possible to use Recaptcha V2 at the Enterprise tier if we are over 100k assessments? I'm a little confused about how the Recaptcha Enterprise product is related to the Enterprise tier. My hope is we can use the Enterprise tier without the Enterprise product if the Enterprise product doesn't support what we need.Thanks!

Hello, I hope you can assist me with a question regarding reCAPTCHA billing. I've reviewed the following documentation: reCAPTCHA Billing Information reCAPTCHA Pricing My question is about what happens when the free tier of 10,000 assessments combined is reached. Do I then need to pay $8 for each of my reCAPTCHA keys? Furthermore, does the 100,000 assessment limit apply individually to each reCAPTCHA key? For example, if I have two keys, would I have a limit of 100,000 assessments per key, totaling 200,000 assessments across both? Thank you for your time and clarification. Best regards, Martin

Hi Team,I'm currently implementing reCAPTCHA Enterprise on a web page within my application and have encountered an issue where the validation seems to expire after just 1 minute, rather than the expected 2-minute validity period as stated in Google's documentation.Here's how the flow works:A user interacts with the reCAPTCHA checkbox on the page.Once checked, my application calls an internal Web API.This API then sends a Captcha Verification Request and successfully returns a valid score.However, despite a successful verification, the validation expires right after 1 minute, and gives me a message "Validation failed, please try again"  — even though no additional action or reset is performed on the token.To troubleshoot:I reviewed Google's documentation and found the expected validity is 2 minutes.I removed all other JavaScript from the page to rule out script conflicts.I verified that there are no manual re

Hello everyone,I've followed the migration guide provided by google to migrate the recaptcha key to google cloud console.Everything appears to be setup correctly but there are a couple of things that I don't fully understand:1.- The Security > reCAPTCHA page shows a number of assesment request, currently 44. Is that the number that shouldn't go above 10.000 for free reCAPTCHA usage?2.- When I go to the specific migrated key I see this:My websites are using certain wordpress plugins that can only use recaptcha with site and secret keys, do I require some other modifications to this to work?I thought everything would be working they way it was and this was just a migration to google cloud console.Als

It’s an error popping up saying my account got phished and it says ERROR for site owner: Invalid site keyfor recaptcha so I need to talk an agent live chat about this issue being resolved 

Hello, we recieved an email saying that we will need to change the recaptcha and create a google cloud project for it to keep working. The email said that in the last 3 months my recaptcha average 327 assesments, but when I go to the recaptcha admin page I see 98,000 requests for the last 90 days.How does the pricing work for this? Does it charge when you reach X amount of requests or X amount of assesments? In this case assesments and requests are the same? If not what's the difference?Kind regards,  

I think reCAPTCHA has a bug for meim Trying to log into steam and I forgot my username, so I type my email and click I’m not a robot. It gives me what feels like thousands of prompts and then it tells me I’m a robot. I’m just trying to play my video games, I’m not a robot.

Hi,We are building a form service similar to Google Forms, where users can create custom forms and embed them into their websites via <iframe>.We’re currently implementing reCAPTCHA v3 to protect these embedded forms. Using the default implementation, the reCAPTCHA badge at the bottom left is as expected. We’d like better to localize the UI for Japanese users and our service.Current:What we’re trying to achieve We want to:1. Display the attribution text in Japanese, e.g.:```<div>  <img src="https://www.gstatic.com/recaptcha/api2/logo_48.png">  <div>

Hello Sir/madam I got this email that Google reCAPTCHA keys will need to be migrated to a Google Cloud project by the end of 2025. Assuming I forget to do the migration, will the recaptcha come to a grinding halt on my webpage?Thank you Karvesh

Hello, everyone!I am developing a website and would like to integrate reCaptcha into it. The FAQ states: "You are allowed to hide the badge as long as you include the reCAPTCHA branding visibly in the user flow. Please include the following text...".What exactly user flow means? Does it mean to include everywhere links for privacy and policy where I'm using it. I have Footer component which is visible everywhere, on all pages. There I have link to Terms of use for my web-app. Will it be enough for my page to state: "This site is protected by reCAPTCHA and the Google<a href="https://policies.google.com/privacy">Privacy Policy</a> and<a href="https://policies.google.com/terms">Terms of Service</a> apply." The link to this page is accessible from any page.

Hello, I am having a problem with reCAPTCHA v2 and v3. It seems that on all the websites where we have it installed, it has stopped working. I have tried all possible methods from reCAPTCHA tutorials, and I switched to version 2 to see if that would fix it.The error that is returned is browser_error, and it seems to always be the same. This error causes the form to be blocked, and it is not possible to submit it. Or, if I change the way the captcha is implemented and it allows submission, the token is invalid and it's not possible to complete the process.Why am I almost always getting an invalid token?Sometimes it works in Chrome, but in other browsers, it doesn't.

I have just upgraded my sites to reCAPTCHA V3 and the admin pages shows that I have Number of Requests as high as 1211 per day.  When I look on the Google Cloud console, it shows a count of 68 for the last 30 days under Protected Traffic.Based on the number of users I get to my site, the 68 number is more realistic.  I'm concerned I will hit the 10,000 limit based on the admin page.  I don't know where all these requests are coming from.Any help would be appreciated.Thanks

Since February 2025, reCAPTCHA v3 validation has stopped working on one of my websites, even though it was working perfectly from summer 2023 until February 2025. A client alerted me that they were unable to submit a form. Also note that I have other websites and reCAPTCHA works perfectly on them. I’ve checked all the usual points:✅ Correct version used (v3), keys properly placed✅ Domain correctly added in the reCAPTCHA admin console✅ Tested with different form plugins (Elementor + Fluent Forms)✅ Checked for possible conflicts (themes, plugins, updates)✅ No server-side blocking (curl test OK, no firewall issues)✅ Created several new keys on 2 different Google accounts → same issue: "Invalid key" or "Can not connect to the reCAPTCHA server (0)" At this point, I suspect a bug or soft-block on Google's side (maybe triggered by multiple key regenerations?), or possibly a doma

I attended a reCAPTCHA demo at Google Cloud Next, and it showcased how GCP reCAPTCHA protects websites from spam and abuse. It uses advanced risk analysis to detect bots, offering features like score-based assessments and mobile SDKs. The seamless integration with Google Cloud tools, like Cloud Armor, enhances security for high-traffic services. It’s a robust solution for enterprises.

Hi,I would like to migrate from V2 to Enterprise.However, I wouldn't like to get the score back, but to keep having the visible captch when needed.Is it possible?What should I change in the backend code?(currently querying https://www.google.com/recaptcha/api/siteverify and checking the success) 1 0 6

Once a key is created, I'm not finding how to add a domain to an existing enterprise key.I tried asking Gemini and providing it screenshots and it is stuck too, so I'm thinking this feature doesn't exist yet. If it does, please let me know where that is administered.

Hello,With the new Recaptcha dashboard, I am unable to generate the SECRET KEY and WEBSITE KEY to be entered on the Wordpress CONTACT FORM 7 plugin.Can you please help me out?Thank you very much.

Hi guysI have myproject v3 keys(pub and priv) and have myproject2 v3 keys(pub and priv)The problem is that when the "grecaptcha.executed();" instruction is executed, in the case when myproject v3 keys are used, a check for a fire hydrant(etc) appears on page if reCAPTCHA has the slightest doubt, but in same case with using myproject2 v3 keys - the check does not appear when working from the same browser and from the same tabDid according to docs# head<script src="https://www.google.com/recaptcha/api.js" async defer></script># body<div class="g-recaptcha"id="g-recaptcha"data-sitekey="{myproject v3 pub key}"data-size="invisible"># jsfunction execCaptcha(){try {    grecaptcha.execute();

Hi, My name is Futoshi Obata, compliance manager of a Japanese financial corporation. Our company is using your reCAPTCHA function for our login screen. On 6th February, the reCAPTCHA function was suddenly stopped. We guess the reason that our payment account did not pay the fee for the function. However, we cannot find the payment account because it was set by someone who has been resigned from our company several years ago. (Currently, we have set up a new payment account and the issue was fixed). We would like to find the payment account which might trigger the issue. Could you kindly find the payment account which caused the issue, please? If you need more information for the investigation, please let me know.

Is there a black list or something that flags specific IPs as bots even if they are not.  We are having issues with our employees getting blocked on all recaptcha sites.  I don't even know where to go with this.  It is able to reach recaptcha but we can't get much past that.  This of course means people keep retrying recaptcha over and over and over, causing the problem to be worse.  What do I need to do here?

Hello,I have a question about reCAPTCHA v3.I heard that reCAPTCHA must be migrated to Google Cloud Project by the end of 2025. So, I tried migrating reCAPTCHA but encountered an issue when creating a project.When I clicked the "Create a project panel" button, I was required to enter the following information:- Project Name- Organization- LocationI noticed that my company's information was already pre-filled in the Organization and Location fields. However, the websites registered with reCAPTCHA belong to a different domain than my company. (These websites are for a subsidiary company, so the domain is different.)In this case, can I still create a project and manage websites with a different domain?Thank you for your help.

Sorry, I can't even figure out where to post questions for Google reCaptcha Enterprise.  Please direct this where it should be. Thanks.I am trying to implement Google reCaptcha Enterprise. I am not new to coding but this is killing me. I program in C#, VB, JavaScript, .NET and others.  I cannot get a simple Test page to work and validate a checkbox.I would give you an example and errors, but I have tried 20 different ways. The closest I got was a 403 error on the assessment call.  I tried the .NET library, which looked VERY promising until I ran it and got an error about needing an environment Variable GOOGLE_APPLICATION_CREDENTIALS pointing to a file that I can find NO documentation on. What goes in it?It should be simple. I have jumped through the hoops, created a project, enabled the Enterprise API, I created an API key, granted access to localhost and my test domain. Can someone show me a SIMPLE sample that presents a checkbox and

hello setting up an opencart site, (did one years aho, same thing, just updated)opencart has a google recapcha plugin. Set up keys on recapcha site, plug in site id and key to plugin.....and site shows "ERROR for site owner: Invalid key type"recapcha site shows "Finish setting up your key: Request tokensTo protect your site or app, finish setting up your key. Start by requesting tokens (executes)."link to 'request keys' has pages of info which has nothing to do with what i was using, nor is there anything obvious about key types. I remember being able to choose v2 or v3 recapcha, but there appears to be no option for that..... so I am stumped.note. the plugin only has options for site ID and secret key, nothing else apart from a link to the recapcha page.

reCAPTCHA has over a decade of experience defending the internet and data for its network of more than 5 million sites. reCAPTCHA Enterprise builds on this technology with capabilities, such as two-factor authentication and mobile application support, designed specifically for enterprise security concerns. With reCAPTCHA Enterprise, you can defend your website against common web-based attacks like credential stuffing, account takeovers, and scraping and help prevent costly exploits from malicious human and automated actors. And, just like reCAPTCHA v3, reCAPTCHA Enterprise will never interrupt your users with a challenge, so you can run it on all webpages where your customers interact with your services. In this video, Program Manager Nick Troutini, provides reCAPTCHA Enterprise users the information and resources you need to quickly gain cloud security confidence, stay up-to-date with the latest product updates, and find support when you n

Check reCATPCHA v2, it has some type of configuration to accept IPV4 and IPv6.