Security > Google reCAPTCHA Admin Panel

IMPORTANT

Before Google reCAPTCHA can be configured, you must ensure that your PHP.ini file includes the following setting: allow_url_fopen = 1. This may require developer assistance. See Required PHP Settings in the Installation Guide.

To access the store configuration settings, choose Stores > Settings > Configuration from the Admin sidebar.

For more information about changing these settings, see Google reCAPTCHA in the Admin Systems Guide.

reCAPTCHA v2 (“I am not a robot”)

reCAPTCHA v2 ("I am not a robot")

Field Scope Description
Google API Website Key Global The website key that is created when you register your Google reCAPTCHA account.
Google API Secret Key Global The secret key that is associated with your Google reCAPTCHA account.
Size Global The size of the Google reCAPTCHA box that appears during login. Options: Normal (default) / Compact
Theme Global Determines the style of the Google reCAPTCHA box. Options: Light Theme (default) / Dark Theme
Language Code Global A two-character code that specifies the language that is used for Google reCAPTCHA text and messaging.

reCAPTCHA v2 Invisible

reCAPTCHA v2 Invisible

Field Scope Description
Google API Website Key Global The website key that is created when you register your Google reCAPTCHA account.
Google API Secret Key Global The secret key that is associated with your Google reCAPTCHA account.
Invisible Badge Position Global The position of the invisible reCAPTCHA badge on each page. Options: Inline / Bottom Right / Bottom Left
Theme Global Determines the style of the Google reCAPTCHA box. Options: Light Theme (default) / Dark Theme
Language Code Global A two-character code that specifies the language that is used for Google reCAPTCHA text and messaging.

reCAPTCHA v3 Invisible

reCAPTCHA v3 Invisible

Field Scope Description
Google API Website Key Global The website key that is created when you register your Google reCAPTCHA account.
Google API Secret Key Global The secret key that is associated with your Google reCAPTCHA account.
Minimum Score Threshold Global The minimum score that identifies a user interaction as a potential risk, where 1.0 is a typical user interaction, and 0.0 is likely a bot. Default: 0.5
Invisible Badge Position Global The position of the invisible reCAPTCHA badge on each page. Options: Inline / Bottom Right / Bottom Left
Theme Global Determines the style of the Google reCAPTCHA box. Options: Light Theme (default) / Dark Theme
Language Code Global A two-character code that specifies the language that is used for Google reCAPTCHA text and messaging.

reCAPTCHA Failure Messages

Failure messages

Field Scope Description
reCAPTCHA Validation Failure Message Global The message that is displayed in the Admin if verification fails. Default text: reCAPTCHA verification failed.
reCAPTCHA Technical Failure Message Global The message that is displayed in the Admin if reCAPTCHA fails to return a verification result. Default text: Something went wrong with reCAPTCHA. Please contact the store owner.

Admin Panel

Admin Panel

NOTE

The reCAPTCHA type that you choose must match the type that is associated with the API key from your Google reCAPTCHA account.

WARNING

When using reCAPTCHA version 3, a genuine user with low score cannot proceed. For version 2, a genuine user with a low score receives a challenge. Consider carefully if genuine users with a low score should have an opportunity to solve a challenge (version 2) or be blocked (version 3).

Field Scope Description
Enable for Login Global Determines the type of reCAPTCHA that is enabled for the Admin login. Options:
No - (default) Does not validate the Admin login.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.
Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.
Enable for Forgot Password Global Determines the type of reCAPTCHA that is enabled to request an Admin password reset. Options:
No - (default) Does not validate the password reset request.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.
Invisible reCaptcha v3 - (Recommended) Validates user behavior in the background based on interaction score.

On this page