reCAPTCHA

Hello,I have reCAPTCHA enabled on multiple WordPress sites, and the forms are successfully submitting. However, after a period of inactivity (e.g., around 5 days without form submissions), the reCAPTCHA Key Status changes to "No Activity" or "Unprotected".When I submit the form again, the status changes back to "Protected".Could you please clarify:Is this behavior expected? Does the status change automatically due to inactivity?How can I ensure that the reCAPTCHA key remains "Protected" at all times, even if there is no form activity for several days?Thank you for your help.Best regards

For reCAPTCHA Enterprise v3 where is the disclaimer required? Is it sufficient to include a general disclaimer in the site's Terms of Service? Or does it need to be included in every page that it's integrated? If it does need to be included in every page, is it enough to put it at the bottom of the page or does it need to go as close as possible to the user action (as suggested by user flow here)?Appreciate any guidance on this issue.Emanuel

Hello,Please, I would like to confirm information that was not entirely clear to me about reCaptcha changes.With the migration to the new platform, will the old quotas currently announced in versions V2 and V3 (1000 calls per second or 1000000 calls per month) cease to exist?My website has more than 10000 monthly checks with version v2, so will I be required to activate billing?Is activating billing the same as using the Enterprise version?Thank you in advance.

Hi everyone,If you know anything about this phenomenon where the reCAPTCHA is cut off, please give us some advice.This mainly occurs on Android devices using Web View.

Hi everyone,I’m using reCAPTCHA v3 for bot detection, but recently, I noticed that about 26% of requests are flagged as suspicious. Today, a customer reached out saying he was wrongly blocked during registration despite being a legitimate user. I’d like to understand what could be causing these low scores and whether there are any effective remedies. For example, is it possible to implement a secondary verification step, such as falling back to reCAPTCHA v2 (image selection) when the v3 score is too low? Any insights or best practices would be greatly appreciated. Thanks!

I recently tried to upgrade from recaptcha v2 to v3 as my FE needs to call multiple API from BE and it's difficult to implement it via v2. I want all my BE calls to be secured by recaptcha token. So, chose V3 to not interrupt users. But I can see all the recaptcha tokens get verified without any issue event when I created 200 requests using chrome dev tools in incognito mode. I created 200 tokens using execute function and send the requests to the API. all of them verified successfully with score of 0.9. So, my questions are:Is that because I use localhost for testing? the behaviour might be different in production? Is v3 supposed to detect those sort of requests? automated via a script in dev tools?Is v3 is less secure in compare to v2 as there is no human interaction needed?Is there any other way to use version 2 for multiple API calls? but with one user challenge? Regards,Ali

Hello Everyone,We developed an application that has been using reCAPTCHA for over a year and started acting up stating the certificate is not valid. Even though the expiration date is until 2027 we had to refresh/retrieve a new certificate to get it working again, after that we noticed the fingerprint change, so I was wondering if anyone is aware of this issue.The problem happened 3 days ago and yesterday started happening again but now the fingerprint is the same, we've noticed the problem now is happening randomly in our site and doesn't seem to be an internal issue, more like a problem with reCAPTCHA.I would really appreciate any assistance or direction in the matter... ahead you will find the error thrown by our server:I/O error on GET request for "https://www.google.com/recaptcha/api/siteverify": com.ibm. jsse2. util. j: PKIX path building failed: com.ibm.sec

I'm a website tester for a promotions company and I am getting regularly blocked from submitting forms for our own campaigns? I seem to be the only person who has this problem at my company and the developers can't figure out why? When I hit submit I get the 'reCAPTCHA error.' return error. Has my I.P or email / mobile details been flagged with recaptcha or something? No idea how it works. But it's very frustratingly stopping me from working. Do I contact Google? Any help would be hugely appreciated. I'm quite willing to build a shrine to you.

If the Google reCAPTCHA v3 threshold is set to 0.5, users scoring below this are classified as bots. In such cases, a v2 challenge is presented. However, even after successfully solving the challenge, users are still blocked with the message "Miscellaneous activity. Please try again later." If the puzzle is completed and verified, why are users still unable to proceed?

Good morning.I'm using WordPress PlugIn Contact Form 7 and I have activated the reCAPTCHA v3 integration.I want to ask, through the Site Key or the Secret Key, is it possible to trace the Google account to which they are associated?I ask because by following the link to the reCAPTCHA Admin Console, (https://www.google.com/recaptcha/admin/create) I access the registration page of a new site and not an administration page of the site/domain already activated.How can I do? Is it better to remove the keys and do a new activation, so that I can know which Google account is actually used? I am sure that for the activation of the WordPress site reCAPTCHA key, I used the same WordPress administrator email address, but when I try to log in to Google Account Profile with that email, I cannot find any reference to the WordPress site with reCA

Webflow has native fields for the site & secret keys in settings - which makes implementing this quite easy. However, I've just gotten an email from Google Cloud about it needing to verify, but I'm unclear about exactly how I would go about that for this webbuilder. Anyone who could help?

Hi folks, Once again, just like with Analytics changes, I cannot figure out what to do with the reCaptcha emails to make changes!! Take that Mensa. So, I have recaptcha on my contact form. Works perfectly. Yesterday's emails **appeared** to tell me to create a Google Cloud account to link a payment method. I did. And then found out that I did not need to unless I had more than 10,000 uses of recaptcha a month. I average 5 🙂 So I have this account,  likely do not need it, and have no idea what instructions are telling me to do next. Can someone please advise what to do (or not do?) to put this behind me and keep using recaptcha as I alwways have been? Thanks so much! ~Bob

HII wanted to ask a few questions about the update of the rechaptha service, first of all to confirm that non-migrated accounts will not work at the end of 2025!! ??  then today I tried to create new rechapta v3 api, but I can't generate pasw key and site key as attached I uploaded the code to head, but the system doesn't let me know if it's loaded or not!!?" <script src="https://www.google.com/recaptcha/enterprise.js?render=6LfxftEqAAAAAGzy2tIrV3dZ-Shp-56vYACjtmVR"></script>"returning to my use, I usually generated the keys and configured them with one of the rechapta plugins for the cms,

I cannot find any detailed explanation on the meaning of this response. Our website is frequently receiving it but we cannot take any action based on it as it is vague. I would appreciate it if someone could please explain.

Hi Team,We are planning on upgrading our reCAPTCHA versions from v2 to v3.We currently have it deployed to a dev environment.It always returns a score of 0.9 for all users including automated tests we run using selenium web driver.We've tried accessing outside our network and within as well as multiple browsers.We believe we have everything setup correctly so were just unsure why there is no discrepancies with the scores we acquire.We are seeing most of users having scores 0.9 in google admin.Any input to help would be appreciated.Thanks! 

Will the new reCAPTCHA be billable?And from when?  Are there free plans / solutions?

We have a ReCaptcha protected site.The account that set up this ReCaptcha is inaccessible because we do not know the last password used and the phone number associated with the account is no longer assigned.We have no way to regain access to this account because the only option we are offered is to send an SMS.

Hi There,I recently received an email regarding the migration of the Google reCAPTCHA key to a Google Cloud Project by the end of 2025. Could you kindly clarify the purpose of this email? Is it a promotional notice or a mandatory action that requires attention?I appreciate your assistance in helping me understand the next steps.

I am in the process of upgrading to the enterprise and which the instructions I was reading is just changing api.js to enterprise.js and adding .enterprise in the script. I am trying to have this load on all pages just like v3 was doing but when I load the page I get a ReferenceError saying "grecaptcha is not defined". Did I miss something in the document?NEW CODE <script src="https://www.google.com/recaptcha/enterprise.js?render=6LfMoRsTAAAAADgeUdXgVORH6yH3eFKXz3ayq7VX"></script> <script> grecaptcha.enterprise.ready(function() { grecaptcha.enterprise.execute('6LfMoRsTAAAAADgeUdXgVORH6yH3eFKXz3ayq7VX', {action: 'Home'}).then(function(token) { }); }); </script>  OLD CODE <script src="https://www.google.com/recaptcha/api.js?render=6LfMoRsTAAAAADgeUdXgVORH6yH3eFKXz3ayq7VX"></script> <script> grecaptcha.ready(function() { grecaptcha.execute('6LfMoRsTAAAAADg

I recently encountered an issue where some of our systems unexpectedly became unavailable. After investigating, we found that the reCAPTCHA token used in our applications had suddenly become invalid.We didn’t deactivate the token ourselves and didn’t receive any notification from Google about its deactivation. Has anyone else faced a similar situation? I’d love to hear your insights or suggestions on where to start investigating this kind of issue.I’m also a bit concerned that this might happen again in the future, so any advice on how to prevent it would be greatly appreciated.Thanks in advance for your help!

Hello,In https://www.google.com/recaptcha/admin/ I have set up 27 websites.In the last 7 days I have had a total of over 10,000 requests, so I imagine that monthly I get to over 40,000 requests.All these sites are connected to a project on Google Cloud Platform, where I have also activated billing, which is 0€ each month.What is the limit of free requests?Do I get a warning when I exceed this limit?

I went herehttps://www.google.com/recaptcha/admin/createfilled in the blanks and hit createnow I have an email saying my setup isn't complete and sent me herehttps://console.cloud.google.com/security/recaptcha/6LeUgakqAAAAAG1ZGckvSMvRdNWZIqc9Yohr-AEK/integration?project=my-community-calendars I have no idea what this page says. It may use English words which is my native language but I am not a coder and I thought recaptcha was a simple one click install for Wordpress.  why am I being sent to some technical dashboard asking me APIs, JSONs and Http refferrers??  I am not going to coding school just I can put a spam deterrent on a simple WP form

I've had an error pop up when setting up reCAPTCHA on a Webflow website. (It’s worth noting that Webflow doesn’t provide support for this.)Webflow includes built-in fields for the site and secret keys in its settings, which usually makes the setup simple. However, I recently received an email from Google Cloud about needing to verify something, and I’m not sure how to approach this within Webflow.Has anyone experienced this issue?

Starting around 13:00 pacific today, we've been getting elevated levels of errors trying to verify recaptcha from our back-end.  The error we're getting back is:{ "success": false, "error-codes": [ "timeout-or-duplicate" ]}Here's a screenshot of stdout from our server showing instaces of "recaptcha":As far as I can tell, we haven't changed anything that would have caused this.The only thing I can think of is converting from a legacy to enterprise key -- that was done last Monday as a direct result of this -- https://www.googlecloudcommunity.com/gc/reCAPTCHA/ReCaptcha-Test-Key-stopped-working/m-p/860259#M346 According to the UI of recaptcha, we're seeing elevated le

Hello, I have a form on my website that allows non-authenticated users to complete. The form can also be completed by the user logging in. If the user has Google Services turned off, can they still access and complete the form if they are signed-in?Scenarios:1) unauthenticated user navigates to form. Prompted by reCaptcha. Google Services not deactivated. All ok. 2) unauthenticated user navigates to form. Prompted by reCaptcha. Google Services deactivated. User does not see form? What do they see?3) authenticated user navigates from within the application to the form. They will see the form? Thanks for your help.