DocumentationCommerceConfiguration Reference

Security > Google reCAPTCHA Admin Panel

Last update: Wed Nov 29 2023 00:00:00 GMT+0000 (Coordinated Universal Time)

CREATED FOR:

  • Beginner
  • Intermediate
  • Admin
  • Developer
  • User
IMPORTANT
Before Google reCAPTCHA can be configured, you must ensure that your PHP.ini file includes the following setting: allow_url_fopen = 1. This may require developer assistance. See Required PHP Settings in the Installation Guide.

To access the store configuration settings, choose Stores > Settings > Configuration from the Admin sidebar.

For more information about changing these settings, see Google reCAPTCHA in the Admin Systems Guide.

reCAPTCHA v2 (“I am not a robot”)

reCAPTCHA v2 ("I am not a robot")

Field
Scope
Description
Google API Website Key
Global
The website key that is created when you register your Google reCAPTCHA account.
Google API Secret Key
Global
The secret key that is associated with your Google reCAPTCHA account.
Size
Global
The size of the Google reCAPTCHA box that appears during login. Options: Normal (default) / Compact
Theme
Global
Determines the style of the Google reCAPTCHA box. Options: Light Theme (default) / Dark Theme
Language Code
Global
A two-character code that specifies the language that is used for Google reCAPTCHA text and messaging.

reCAPTCHA v2 Invisible

reCAPTCHA v2 Invisible

Field
Scope
Description
Google API Website Key
Global
The website key that is created when you register your Google reCAPTCHA account.
Google API Secret Key
Global
The secret key that is associated with your Google reCAPTCHA account.
Invisible Badge Position
Global
The position of the invisible reCAPTCHA badge on each page. Options: Inline / Bottom Right / Bottom Left
Theme
Global
Determines the style of the Google reCAPTCHA box. Options: Light Theme (default) / Dark Theme
Language Code
Global
A two-character code that specifies the language that is used for Google reCAPTCHA text and messaging.

reCAPTCHA v3 Invisible

reCAPTCHA v3 Invisible

Field
Scope
Description
Google API Website Key
Global
The website key that is created when you register your Google reCAPTCHA account.
Google API Secret Key
Global
The secret key that is associated with your Google reCAPTCHA account.
Minimum Score Threshold
Global
The minimum score that identifies a user interaction as a potential risk, where 1.0 is a typical user interaction, and 0.0 is likely a bot. Default: 0.5
Invisible Badge Position
Global
The position of the invisible reCAPTCHA badge on each page. Options: Inline / Bottom Right / Bottom Left
Theme
Global
Determines the style of the Google reCAPTCHA box. Options: Light Theme (default) / Dark Theme
Language Code
Global
A two-character code that specifies the language that is used for Google reCAPTCHA text and messaging.

reCAPTCHA Failure Messages

Failure messages

Field
Scope
Description
reCAPTCHA Validation Failure Message
Global
The message that is displayed in the Admin if verification fails. Default text: reCAPTCHA verification failed.
reCAPTCHA Technical Failure Message
Global
The message that is displayed in the Admin if reCAPTCHA fails to return a verification result. Default text: Something went wrong with reCAPTCHA. Please contact the store owner.

Admin Panel

Admin Panel

NOTE
The reCAPTCHA type that you choose must match the type that is associated with the API key from your Google reCAPTCHA account.
WARNING
When using reCAPTCHA version 3, a genuine user with low score cannot proceed. For version 2, a genuine user with a low score receives a challenge. Consider carefully if genuine users with a low score should have an opportunity to solve a challenge (version 2) or be blocked (version 3).
Field
Scope
Description
Enable for Login
Global
Determines the type of reCAPTCHA that is enabled for the Admin login. Options:
No - (default) Does not validate the Admin login.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.
Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.
Enable for Forgot Password
Global
Determines the type of reCAPTCHA that is enabled to request an Admin password reset. Options:
No - (default) Does not validate the password reset request.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.
Invisible reCaptcha v3 - (Recommended) Validates user behavior in the background based on interaction score.
recommendation-more-help
d39aca6f-58a0-41c6-83eb-39fd0ef30672