reCAPTCHA

Google's recaptcha verify responded with internal error: timeout-or-duplicate: The response is no longer valid: either is too old or has been used previously. Expected user input to be valid. Will return a CaptchaError type

Hello,I am reaching out to seek community's assistance in verifying if our reCAPTCHA setup is working as expected.Currently, we are noticing an unusual behavior where reCAPTCHA v3 consistently returns a score of 0.9, even when testing with Selenium scripts running on Chrome. Given the nature of these tests, we would expect a lower score since they simulate automated interactions, which reCAPTCHA is designed to flag.To help investigate, here are some details:Key Information:reCAPTCHA Site Key: 6LeI8ooqAAAAACCztF5p1ucp3cE8_N97KrZ7OMKXThe key is linked to 4 non-production environments. Please let me know if you want domain information.Behavior Observed:We received low scores(<0.9) during our tests using Selenium on December 3, 2024, but we are not observing the same results during our tests today, i.e., December 4, 2024.Regardless of the type of interaction, including au

Hi, we're experiencing an issue with the ReCaptcha SDK in our iOS app, which supports multiple regions. The issue arises when a user switches regions within the same session.Steps to reproduce:- User logs in to Region A (e.g., Italy) using the associated Site Key.- User logs out and switches to Region B (e.g., France) with a different Site Key.- The SDK throws an error: RecaptchaErrorInvalidSiteKey = 2.We understand from the documentation that the SDK supports only one site key per session, but our Android app does not exhibit this issue. It seamlessly switches regions and Site Keys without errors. Also, if the iOS app is completely restarted, the new Site Key works fine.However, switching regions within the same session consistently fails. Could you please assist us in resolving this issue? Are there any recommendations or workarounds for multi

Hi Team,Can anyone suggest what is the least version of xcode can be compactable for reCAPTCHA SDK 18.6.0?                                              Thank You.

I created a reCAPTCHA site in February 2024 but I am unable to view the site when I log in to the admin console. The site was definitely created as I was able to apply the site and secret keys when deploying captcha to the webpageI created separate reCAPTCHA in Aug 2024 which I am able to see.

Hello,I've recently implemented reCAPTCHA v3 Enterprise on one of our website pages. I understand that reCAPTCHA v3 takes time to learn user behavior and optimize the score, but I'm seeing highly inconsistent scores even after 3 days.The main issue is that the scores returned are seemingly random. For instance, the same user performing the same action can receive scores ranging from very low (e.g., 0.1 or 0.3) to quite high (e.g., 0.9). This inconsistency could affect real users, as we rely on stable scores to filter out bots effectively.Could someone help me understand why this might be happening? Is it expected behaviour, or could there be an issue with the implementation?Also, is there a recommended way to simulate bot-like behaviour to test and better understand how reCAPTCHA scores respond to different scenarios?

My company has been using reCaptcha for a few years now. It worked flawlessly until two hours ago when it just stopped working. We're seeing no errors.What's worse, I can't access the related reCaptcha settings page and I have it in my bookmarks so I know it's correct. Can anyone help with this issue? Our platform is effectively down as our users can't log in.

Hello,I’m currently using reCAPTCHA v3 on a website, and I’ve noticed a couple of issues.1. Logs are not being generated for any reCAPTCHA events, even though it’s implemented correctly and CAPTCHA is functioning in some cases.2. Occasionally, I’m seeing a 500 error from reCAPTCHA, and at other times, it returns a timeout error.Has anyone else encountered similar issues? Could this be due to misconfiguration on my end, or could it be related to reCAPTCHA service availability? I’d appreciate any insights or advice on troubleshooting this.Thanks in advance!Regards,Ten

I have created a custom Knockout.js binding to integrate Google reCAPTCHA into my MVC application using TypeScript. However, I'm encountering an issue where the token returned by grecaptcha.execute is null when the form is submitted. Below is the code for my custom binding handler: import ko from 'knockout';ko.bindingHandlers.recaptcha = {init: function (element, valueAccessor) {var params = ko.unwrap(valueAccessor());var loadRecaptchaScript = function () {if (!document.querySelector(`script[src="https://www.google.com/recaptcha/api.js?render=${params.siteKey}"]`)) {var script = document.createElement('script');script.src=`https://www.google.com/recaptcha/api.js?render=${params.siteKey}`;scrip

Hello everyone. Fist time poster here with an issue I'm seeking help from the collective wisdom of this community. I'm using a brand new laptop with a touchscreen running Windows 11 Pro. When I complete the Captcha (correctly) I get a spinning circle. This lasts for around 30 seconds. Then  it says "Verification timed out" and makes me start all over checking the ""I'm not a robot box". I do have the easy auto fill extension added. I'm using touchscreen and autofill to speed things up as I'm trying to score some highly competitive limited drops. So I'd like to keep using them if possible. Any ideas what Issues I might be encountering?

Hi all,I have a couple of new keys I've created within our GCP project as I can no longer create them in the old way.On three separate sets of keys I'm getting this error - Finish setting up your key: Request scoresTo fully protect your site or app, finish setting up your key. Your key is requesting tokens (executes), but isn't requesting scores (assessments).For example:These are newly built websites and having created the keys within GCP itself. (Not upgrading from the legacy method to GCP). Any keys so far that I've clicked "Upgrade" shows me the status of "Protected".For example:

Hello,My organization uses the free version of reCAPTCHA.  The account was set up in 2019 by a former employee.  We do not have access to the password for the google account, and the recovery email on record is for a domain we no longer use.  Therefore, we are unable to sign in to view usage and/or update to a different pricing plan.  I have tried every recovery option available to me, but cannot access the account. We use reCAPTCHA for our REDCap system, and there are hundreds of surveys that depend on this service.  We do not want to set up a new account with a new site and secret key, as this will deny access to all of the projects that are under the existing keys.Can anyone assist?  Thank you so much!

I am currently using Google reCAPTCHA Enterprise.As I understand, up to 10,000 assessments are free with the Essentials tier. Is this usage calculated based on the calendar month (from the 1st to the end of each month), or does it count a month from the day reCAPTCHA Enterprise was first used?Additionally, I would like to set up notifications if the reCAPTCHA assessment count exceeds a certain threshold within a month. Is this possible, and if so, could you provide guidance on how to configure it?

Hi Team, We are getting an invalid recaptcha error with a risk analysis score of 0.3. We need to know why we are getting a score of 0.3 while sending tokens to the recaptcha token validation API through the mobile app when user doing some interactions. Please find the below response and find more details. Also we got success response at intermittent time {"status_code":"invalid_recaptcha","invalid_request":"invalid reCAPTCHA token","recaptcha_response":{"riskAnalysis":{"score":0.3,"reasons":[],"extendedVerdictReasons":[],"challenge":"CHALLENGE_UNSPECIFIED"},"name":"projects/31661614596/assessments/6071678a6a000000","tokenProperties":{"valid":true,"hostname":"","createTime":"2024-11-04T12:16:55.900Z","androidPackageName":"","iosBundleId":"org.ahm-ahfc.ahfc.*****","action":"login","invalidReason":"INVALID_REASON_UNSPECIFIED"},"accountDefenderAssessment":{"labels":[]},"event":{"headers":[],"requestedUri":"","firewallPolicyEvaluation":false,"wafTokenAss

Do we need a BAA signed for enterprise recaptcha? If so, how do we obtain it

Currently I have a Google account for my organization.Under it I have 2 active api's (HSHSPublicGeocodingAPI and HSHSBizRecaptcha). The reCAPTCHA v2 account is Enterprise. I am being asked if I can add another reCAPTCHA Enterprise account, v3 under HSHSBizRecaptcha. Looking at documentation I think I can but I want to be sure so I can relay that information. If not, I guess the requestor can create another Google account and create their own reCAPTCHA account. Thanks in advance.

I integrated reCAPTCHA Enterprise (score-based) in my web application. Everything is working fine, and I am getting the score. I want to configure "Account Defender" and "SMS toll fraud protection."  For "SMS toll fraud protection", I am sending the account identifier to the API. While configuring the account defender, getting an API error in "Annotate Login Events". Below is my code1. First I created the reCAPTCHA Enterprise assessment, got the assessment_id (name field), and sent that assessment_id to annotate the assessmentconst url = `https://recaptchaenterprise.googleapis.com/v1/${result}:annotate`;const data = {"annotation": "LEGITIMATE","reasons": "REASON_UNSPECIFIED"};fetch(url, {method: 'POST',mode: 'no-cors',body: JSON.stringify(data),headers: {'Content-Type': 'application/json',

Hi Team,We use google captcha V3 for bot detection and when the score is low, we fallback to V2 to challenge the user. We have setup both v3 and v2 as per the docs. We use javascript to programmatically execute V3 and V2 using `grecaptcha.execute( )` method. The issue here is that, the registered callback for V2 is not getting triggered for some cases due to which the users are stuck in the captcha step. It gets triggered for staging environment but not in production. Need to understand what is missing here. TLDR; Registered the callback in `render` method of V2 as per docs. Calling `execute` invokes the challenge but the callback is not triggered post that.  

exact error : POST https://recaptchaenterprise.googleapis.com/v1/projects/770978332111/assessments/1a4b51fac6000000:annotate net::ERR_ABORTED 400 (Bad Request)code:async function annotateAssessment(assessmentID, annotation, reasons, accountId) {const annotateUrl = `https://recaptchaenterprise.googleapis.com/v1/${assessmentID}:annotate`;const annotateData = {annotation

exact error : POST https://recaptchaenterprise.googleapis.com/v1/projects/770978332111/assessments/1a4b51fac6000000:annotate net::ERR_ABORTED 400 (Bad Request)code:async function annotateAssessment(assessmentID, annotation, reasons, accountId) {const annotateUrl = `https://recaptchaenterprise.googleapis.com/v1/${assessmentID}:annotate`;const annotateData = {annotation

What could be the reasons for receiving a 404 Bad Request error when calling the annotate method at the recaptchaenterprise.googleapis.com/v1/ASSESSMENT_ID:annotate, and how can we troubleshoot this issue?

Hi, I need support to implement a Captcha in a form of my Angular PrimeNG app (backend PHP). I'm facing an issue : the variable grecaptcha is unknown. I use this link in my index.html file : <script src="https://www.google.com/recaptcha/enterprise.js" async defer></script> Looking forward to getting in touch, Sam 

Hi all, I have been working on moving Gmail SMTP for a set of client Wordpress sites under their company account. With the mail settings all went well.Since they are also using Contact Form 7 with reCAPTCHA v3, they started getting impersonation alerts as the reCAPTCHA was configured from a non-business Gmail address. So, logically, on 7th Oct I moved the captcha configuration under their company account as well, but since yesterday we're getting alert about the configuration not working because it's missing "an assessment".   Additionally, each site key will often be green and then without any changes anywhere move to red or randomly move from red to yellow. Can you explain how to understand this? Why are the keys randomly changing status? Why do 2 different domains with analogous configuration get different security rating? (red vs orange, see below, they are team member websites so exactly the same except the copy)Also, is there a

Hi all, I have been working on moving Gmail SMTP for a set of client Wordpress sites under their company account. With the mail settings all went well.Since they are also using Contact Form 7 with reCAPTCHA v3, they started getting impersonation alerts as the reCAPTCHA was configured from a non-business Gmail address. So, logically, on 7th Oct I moved the captcha configuration under their company account as well, but since yesterday we're getting alert about the configuration not working because it's missing "an assessment".  Additionally, each site key will often be green and then without any changes anywhere move to red or randomly move from red to yellow. Can you explain how to understand this? Why are the keys randomly changing status? Why do 2 different domains with analogous configuration get different security rating? (red vs or

In our case we are seeing a case where recaptcha is failing our request for a user agent while it is success for the same user agent at other times. What could be the reason behind this. Sometime we got browser error, sometimes score as 0 and sometimes very low score for the same request.