reCAPTCHA

Hello Team,I’m using reCAPTCHA Enterprise on my website and, to avoid cookies, I’ve configured it to use the www.recaptcha.net source as recommended in Google's FAQ.However, I’ve noticed that some Google cookies, such as AEC and NID, are still being set under the www.recaptcha.net domain.Is there a way to completely avoid these cookies to ensure my platform remains compliant?Thank you!  

Starting around 13:00 pacific today, we've been getting elevated levels of errors trying to verify recaptcha from our back-end.  The error we're getting back is:{ "success": false, "error-codes": [ "timeout-or-duplicate" ]}Here's a screenshot of stdout from our server showing instaces of "recaptcha":As far as I can tell, we haven't changed anything that would have caused this.The only thing I can think of is converting from a legacy to enterprise key -- that was done last Monday as a direct result of this -- https://www.googlecloudcommunity.com/gc/reCAPTCHA/ReCaptcha-Test-Key-stopped-working/m-p/860259#M346 According to the UI of recaptcha, we're seeing elevated levels of "low risk" hits, but nothing to indicate our users are getting errors.  It's pretty much all going into error right now.I'm not going to share our order numbers here, but the last successful order we had in Canada was 13:05 -- in that same time period, we've seen USA orders unaffected.Please a

Hello, I have a form on my website that allows non-authenticated users to complete. The form can also be completed by the user logging in. If the user has Google Services turned off, can they still access and complete the form if they are signed-in?Scenarios:1) unauthenticated user navigates to form. Prompted by reCaptcha. Google Services not deactivated. All ok. 2) unauthenticated user navigates to form. Prompted by reCaptcha. Google Services deactivated. User does not see form? What do they see?3) authenticated user navigates from within the application to the form. They will see the form? Thanks for your help. 

Hello,We got a notification from Google stating that we exceeded the free quota and we were asked to add billing information. We added the billing information and the CAPTCHA - v3 started working again.Got a question on this :When we go to reCAPTCHA admin console, when I see the analytics it says we received 816K requests this week (that is from Jan 9th to 15th Jan) and 14% of it were suspicious. Especially, if we take 15th Jan - it says 97,156 requests were legit and 16,320 were suspicious. If I view this project in Google Cloud for Jan 15th: the max. requests we got is 155 and high risk is 1. Why is there a difference between these two dashboards? Could you please give me a detail on what these numbers are? 

Hi,I'm trying to create assessment in my app by salesforce, it returns an error like "{ "error": { "code": 403, "message": "Requests from this referrer are blocked.", "status": "PERMISSION_DENIED" } }" from backend.

Olá, Temos uma solução Google reCAPTCHA (não enterprise) em nossas soluções que funcionam como SaaS e para cada cliente existente são geradas suas próprias chaves, e em 23/10/2024 houve uma crítica no retorno do reCAPTCHA para algumas páginas consideradas “não clássicas” (não sei o que torna clássicas) informando que atingiu a cota. Em 30/10/2024 voltou a operar normalmente sem alterações, tentamos contato com o suporte sem sucesso. Gostaríamos de suporte em alguns pontos: 1 - Qual a causa da crítica (já que nunca ocorreu)? 2 - É provável que aconteça novamente? 3 - Quais os passos para regular o cenário? 4 - O que são chaves clássicas?

Hi everyone, I noticed the ReCaptcha test key seems to stop working this morning, is this a known issue or down time?   

https://downdetector.com/status/recaptcha/According to this, seems like there's a big ReCAPTCHA outage. My own site, which was working fine and untouched, broke today. I'm trying to figure out if this is a real outage, something google changed without telling anyone, or if it's actually a "me" issue. Any insight would be appreciated!Update: This issue fixed itself!

Hello Google Support Team,I am encountering the following error while implementing Firebase reCAPTCHA with the Identity Toolkit API for Phone Authentication:{"error": {"code": 400,"message": "CAPTCHA_CHECK_FAILED : Recaptcha verification failed - SITE_MISMATCH","errors": [{"message": "CAPTCHA_CHECK_FAILED : Recaptcha verification failed - SITE_MISMATCH","domain": "global","reason": "invalid"}]}}I have already tried using the sendVerificationCode method from the Identity Toolkit API on both the server and client sides, but I continue to encounter the same issue.Could you please assist me in understanding the cause of the SITE_MISMATCH error and how to resolve it? Any guidance on what needs to be configured to avoid this error would be greatly appreciated.Thank you in advance for your help!Best regards,Muhammad Nadeem

According to the official Google documentation*, the free version of reCAPTCHA (classic?) allows up to 1 million monthly requests. However, some users have reportedly received notifications stating that the free tier will be reduced to 10,000 monthly requests, and the free reCAPTCHA will be called reCAPTCHA Lite**.* https://developers.google.com/recaptcha/docs/faq** https://www.inclind.com/news/google-recaptcha-price-changeandhttps://forum.joomla.org/viewtopic.php?t=1007892Which of these two pieces of information is correct?Does this mean all users must migrate to reCAPTCHA Enterprise?There is a discrepancy between the official documentation and the notifications being sent. I would appreciate clarification regarding the current policy and any future plans.If anyone has insight into this , it would be greatly appreciated.

When I create API key for invisible recaptcha, once I select V2 "I'm not a robot" Checkbox is automatically enabled and there is not way to disable it.

How do i login to my arcaptcha

Google's recaptcha verify responded with internal error: timeout-or-duplicate: The response is no longer valid: either is too old or has been used previously. Expected user input to be valid. Will return a CaptchaError type within the ruleErrors fields We have global websites but started seeing exceptions from last week only for India store. Is anyone aware about any issues with recaptcha at google ? We have not deployed any new code and suddently started seeing issues.

Hello,I am reaching out to seek community's assistance in verifying if our reCAPTCHA setup is working as expected.Currently, we are noticing an unusual behavior where reCAPTCHA v3 consistently returns a score of 0.9, even when testing with Selenium scripts running on Chrome. Given the nature of these tests, we would expect a lower score since they simulate automated interactions, which reCAPTCHA is designed to flag.To help investigate, here are some details:Key Information:reCAPTCHA Site Key: 6LeI8ooqAAAAACCztF5p1ucp3cE8_N97KrZ7OMKXThe key is linked to 4 non-production environments. Please let me know if you want domain information.Behavior Observed:We received low scores(<0.9) during our tests using Selenium on December 3, 2024, but we are not observing the same results during our tests today, i.e., December 4, 2024.Regardless of the type of interaction, including automated ones, the returned score is always 0.9.Tested using Selenium scripts on Chrome and regular manual intera

Hi, we're experiencing an issue with the ReCaptcha SDK in our iOS app, which supports multiple regions. The issue arises when a user switches regions within the same session.Steps to reproduce:- User logs in to Region A (e.g., Italy) using the associated Site Key.- User logs out and switches to Region B (e.g., France) with a different Site Key.- The SDK throws an error: RecaptchaErrorInvalidSiteKey = 2.We understand from the documentation that the SDK supports only one site key per session, but our Android app does not exhibit this issue. It seamlessly switches regions and Site Keys without errors. Also, if the iOS app is completely restarted, the new Site Key works fine.However, switching regions within the same session consistently fails. Could you please assist us in resolving this issue? Are there any recommendations or workarounds for multi-region apps like ours?Regards

Hi Team,Can anyone suggest what is the least version of xcode can be compactable for reCAPTCHA SDK 18.6.0?                                              Thank You.

I created a reCAPTCHA site in February 2024 but I am unable to view the site when I log in to the admin console. The site was definitely created as I was able to apply the site and secret keys when deploying captcha to the webpageI created separate reCAPTCHA in Aug 2024 which I am able to see.

Hello,I've recently implemented reCAPTCHA v3 Enterprise on one of our website pages. I understand that reCAPTCHA v3 takes time to learn user behavior and optimize the score, but I'm seeing highly inconsistent scores even after 3 days.The main issue is that the scores returned are seemingly random. For instance, the same user performing the same action can receive scores ranging from very low (e.g., 0.1 or 0.3) to quite high (e.g., 0.9). This inconsistency could affect real users, as we rely on stable scores to filter out bots effectively.Could someone help me understand why this might be happening? Is it expected behaviour, or could there be an issue with the implementation?Also, is there a recommended way to simulate bot-like behaviour to test and better understand how reCAPTCHA scores respond to different scenarios?

My company has been using reCaptcha for a few years now. It worked flawlessly until two hours ago when it just stopped working. We're seeing no errors.What's worse, I can't access the related reCaptcha settings page and I have it in my bookmarks so I know it's correct. Can anyone help with this issue? Our platform is effectively down as our users can't log in.

Hello,I’m currently using reCAPTCHA v3 on a website, and I’ve noticed a couple of issues.1. Logs are not being generated for any reCAPTCHA events, even though it’s implemented correctly and CAPTCHA is functioning in some cases.2. Occasionally, I’m seeing a 500 error from reCAPTCHA, and at other times, it returns a timeout error.Has anyone else encountered similar issues? Could this be due to misconfiguration on my end, or could it be related to reCAPTCHA service availability? I’d appreciate any insights or advice on troubleshooting this.Thanks in advance!Regards,Ten

I have created a custom Knockout.js binding to integrate Google reCAPTCHA into my MVC application using TypeScript. However, I'm encountering an issue where the token returned by grecaptcha.execute is null when the form is submitted. Below is the code for my custom binding handler: import ko from 'knockout';ko.bindingHandlers.recaptcha = {init: function (element, valueAccessor) {var params = ko.unwrap(valueAccessor());var loadRecaptchaScript = function () {if (!document.querySelector(`script[src="https://www.google.com/recaptcha/api.js?render=${params.siteKey}"]`)) {var script = document.createElement('script');script.src=`https://www.google.com/recaptcha/api.js?render=${params.siteKey}`;script.defer = true;script.async = true;script.onload = function () {initRecaptcha();};document.head.appendChild(script);} else {initRecaptcha();}};var initRecaptcha = function () {element.addEventListener('click', function (event: any) {event.preventDefault();generateRecaptchaToken(params.siteKey

Hello everyone. Fist time poster here with an issue I'm seeking help from the collective wisdom of this community. I'm using a brand new laptop with a touchscreen running Windows 11 Pro. When I complete the Captcha (correctly) I get a spinning circle. This lasts for around 30 seconds. Then  it says "Verification timed out" and makes me start all over checking the ""I'm not a robot box". I do have the easy auto fill extension added. I'm using touchscreen and autofill to speed things up as I'm trying to score some highly competitive limited drops. So I'd like to keep using them if possible. Any ideas what Issues I might be encountering?

Hi all,I have a couple of new keys I've created within our GCP project as I can no longer create them in the old way.On three separate sets of keys I'm getting this error - Finish setting up your key: Request scoresTo fully protect your site or app, finish setting up your key. Your key is requesting tokens (executes), but isn't requesting scores (assessments).For example:These are newly built websites and having created the keys within GCP itself. (Not upgrading from the legacy method to GCP). Any keys so far that I've clicked "Upgrade" shows me the status of "Protected".For example: We use WordPress as our CMS system and the contact form plugin is this one https://en-gb.wordpress.org/plugins/contact-form-7/ with over 10 million active installations.There's no difference between versions of the plugin for the keys displaying protected or incomplete. As I stated before, upgrading the key seems to work fine and the status's are "protected". It's just when we create them fr

Hello,My organization uses the free version of reCAPTCHA.  The account was set up in 2019 by a former employee.  We do not have access to the password for the google account, and the recovery email on record is for a domain we no longer use.  Therefore, we are unable to sign in to view usage and/or update to a different pricing plan.  I have tried every recovery option available to me, but cannot access the account. We use reCAPTCHA for our REDCap system, and there are hundreds of surveys that depend on this service.  We do not want to set up a new account with a new site and secret key, as this will deny access to all of the projects that are under the existing keys.Can anyone assist?  Thank you so much!

I am currently using Google reCAPTCHA Enterprise.As I understand, up to 10,000 assessments are free with the Essentials tier. Is this usage calculated based on the calendar month (from the 1st to the end of each month), or does it count a month from the day reCAPTCHA Enterprise was first used?Additionally, I would like to set up notifications if the reCAPTCHA assessment count exceeds a certain threshold within a month. Is this possible, and if so, could you provide guidance on how to configure it?