Skip to content

How to Set Up Google reCAPTCHA

reCAPTCHA comes in three versions. Each needs its own keys: a v2 key pair does not work with v3.

  1. On the Google reCAPTCHA tab, click Get keys. It opens Google’s reCAPTCHA admin console.
  2. Add a label, choose the reCAPTCHA type (v2 “I’m not a robot”, v2 Invisible, or v3), and add your domain.
  3. Submit, then copy the Site key and Secret key.

The console needs your Google sign-in, so it is not shown here.

Step 2: Paste the keys and pick the version

Section titled “Step 2: Paste the keys and pick the version”

Go to Configuration → Google reCAPTCHA. Set Version to the type you registered, paste both keys and click Save Changes.

The Google reCAPTCHA tab with v2 Checkbox

For v2 Checkbox: Theme, Size and Submit button (“Disable submit until verified”).

For v3, change Version and the v3 fields appear:

The Google reCAPTCHA tab with v3 selected

  • Minimum score: 0.5 suits most stores. Raise it if bots get through; lower it if real customers are refused.
  • Badge: replaces Google’s floating badge with a text notice under the form.
  • Low score fallback (Pro): a customer who scores too low gets a v2 checkbox for 30 minutes instead of a refusal. Register a second, v2 Checkbox key pair for the same domain and paste it into Fallback v2 site key and Fallback v2 secret key.

Solve the Live preview & key test at the bottom of the tab and press Test. A key pair for the wrong version or domain fails here.

On Configuration → General, set CAPTCHA provider to Google reCAPTCHA and click Save Changes. Then open your login page in a private window.

Google reCAPTCHA v2 on the login page

Google reCAPTCHA v2 on the My Account forms

  • v3 is invisible. Nothing shows on the form. Watch the Logs screen for “reCAPTCHA v3 score too low” in the first days to see whether your minimum score is right.
  • google.com blocked? Set Script domain to recaptcha.net.
  • The setup wizard always saves v2 Checkbox when you pick Google there. Change Version on this tab afterwards.