Skip to main content

I recently tried to upgrade from recaptcha v2 to v3 as my FE needs to call multiple API from BE and it's difficult to implement it via v2. I want all my BE calls to be secured by recaptcha token. So, chose V3 to not interrupt users. 
But I can see all the recaptcha tokens get verified without any issue event when I created 200 requests using chrome dev tools in incognito mode. I created 200 tokens using execute function and send the requests to the API. all of them verified successfully with score of 0.9. 

So, my questions are:

  • Is that because I use localhost for testing? the behaviour might be different in production? 
  • Is v3 supposed to detect those sort of requests? automated via a script in dev tools?
  • Is v3 is less secure in compare to v2 as there is no human interaction needed?
  • Is there any other way to use version 2 for multiple API calls? but with one user challenge? 

Regards,

Ali

Be the first to reply!

Reply