Documentation Commerce Configuration Reference

Security > Google reCAPTCHA Storefront

Last update: Thu Jan 15 2026 00:00:00 GMT+0000 (Coordinated Universal Time)

CREATED FOR:

Beginner
Intermediate
Admin
Developer
User

IMPORTANT

Before Google reCAPTCHA can be configured, you must ensure that your PHP.ini file includes the following setting: allow_url_fopen = 1. This may require developer assistance. See PHP Settings in the Installation Guide.

To access the store configuration settings, choose Stores > Settings > Configuration from the Admin sidebar.

For more information about using Google reCAPTCHA to secure your store, see Google reCAPTCHA in the Admin Systems Guide.

reCAPTCHA v2 (“I am not a robot”)

reCAPTCHA v2 ("I am not a robot")

Field

Scope

Description

Google API Website Key

Website

The website key that is created when you register your Google reCAPTCHA account.

Google API Secret Key

Website

The secret key that is associated with your Google reCAPTCHA account.

Size

Website

The size of the Google reCAPTCHA box that appears when a customer logs in to their account. Options: Normal (default) / Compact

Theme

Website

Determines the style of the Google reCAPTCHA box. Options: Light Theme (default) / Dark Theme

Language Code

Store view

The two-character code that specifies the language that is used for Google reCAPTCHA text and messaging.

reCAPTCHA v2 Invisible

Field

Scope

Description

Google API Website Key

Website

The website key that is created when you register your Google reCAPTCHA account.

Google API Secret Key

Website

The secret key that is associated with your Google reCAPTCHA account.

Invisible Badge Position

Website

The position of the invisible reCAPTCHA badge on each page. Options: Inline / Bottom Right / Bottom Left

Theme

Global

Determines the style of the Google reCAPTCHA box. Options: Light Theme (default) / Dark Theme

Language Code

Store view

A two-character code that specifies the language that is used for Google reCAPTCHA text and messaging.

reCAPTCHA v3 Invisible

Field

Scope

Description

Google API Website Key

Website

The website key that is created when you register your Google reCAPTCHA account.

Google API Secret Key

Website

The secret key that is associated with your Google reCAPTCHA account.

Minimum Score Threshold

Global

The minimum score that identifies a user interaction as a potential risk, where 1.0 is a typical user interaction, and 0.0 is likely a bot. Default: 0.5

Invisible Badge Position

Website

The position of the invisible reCAPTCHA badge on each page. Options: Inline / Bottom Right / Bottom Left

Theme

Website

Determines the style of the Google reCAPTCHA box. Options: Light Theme (default) / Dark Theme

Language Code

Store view

A two-character code that specifies the language that is used for Google reCAPTCHA text and messaging.

reCAPTCHA Enterprise

[SaaS only]{class="badge positive" title="Applies to Adobe Commerce as a Cloud Service projects only (Adobe-managed SaaS infrastructure)."}

[Sandbox]{class="badge yellow" title="The items listed are currently only available in Sandbox environments. Adobe makes new releases available in Sandbox environments first to provide time for you to test upcoming changes before the release is available on Production environments."}

reCAPTCHA v3 Enterprise

Field

Scope

Description

Site Key

Website

The site key that is created when you register your Google reCAPTCHA Enterprise account.

Google Cloud Project ID

Website

The project ID is displayed in the Project info section on the project’s dashboard.

Service Account JSON

Website

Download the service account key from the Google Cloud console and paste its contents into this field.

Minimum Score Threshold

Website

The minimum score that identifies a user interaction as a potential risk, where 1.0 is a typical user interaction, and 0.0 is likely a bot. Default: 0.5

Badge Position

Website

The position of the invisible reCAPTCHA badge on each page. Options: Inline / Bottom Right / Bottom Left

Theme

Website

Determines the style of the Google reCAPTCHA box. Options: Light Theme (default) / Dark Theme

Language Code

Store view

A two-character code that specifies the language that is used for Google reCAPTCHA text and messaging. Leave the field blank to use the default language of the user’s browser.

Validation Failure Message

Store view

A message to display when validation fails.

reCAPTCHA Failure Messages

Failure messages

Field

Scope

Description

reCAPTCHA Validation Failure Message

Store view

The message that is displayed in the storefront if verification fails. Default text: reCAPTCHA verification failed.

reCAPTCHA Technical Failure Message

Store view

The message that is displayed in the storefront if reCAPTCHA fails to return a verification result. Default text: Something went wrong with reCAPTCHA. Please contact the store owner.

Storefront

NOTE

The reCAPTCHA type that you choose must match the type that is associated with the API key from your Google reCAPTCHA account.

WARNING

When using reCAPTCHA version 3, a genuine user with low score cannot proceed. For version 2, a genuine user with a low score receives a challenge. Consider carefully if genuine users with a low score should have an opportunity to solve a challenge (version 2) or be blocked (version 3).

Field

Scope

Description

Enable for Customer Login

Website

Specifies the type of reCAPTCHA that is used when customers sign in to their accounts. Options:
No - (default) Does not validate the login request.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.
Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.

Enable for Forgot Password

Website

Specifies the type of reCAPTCHA that is used when customers request a password reset. Options:
No - (default) Does not validate the password reset request.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.
Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.

Enable for Create New Customer Account

Website

Specifies the type of reCAPTCHA that is used when customer signs up for a new account. Options:
No - (default) Does not validate the account request.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.
Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.

Enable for Edit Customer Account

Website

Specifies the type of reCAPTCHA that is used when customer changes their account information. Options:
No - (default) Does not validate the account request.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.
Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.

Enable for Create New Company Account

Website

(Available with Adobe Commerce B2B only) Specifies the type of reCAPTCHA that is used when a new company account is created. Options:
No - (default) Does not validate the account request.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.
Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.

Enable for Contact Us

Website

Specifies the type of reCAPTCHA that is used to send a message from the Contact Us page of your store. Options:
No - (default) Does not validate the message request.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.
Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.

Enable for Product Review

Website

Specifies the type of reCAPTCHA that is used when customers submit a product review. Options:
No - (default) Does not validate the product review request.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.
Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.

Enable for Newsletter Subscription

Website

Specifies the type of invisible reCAPTCHA that is used when customers sign up for a newsletter subscription. Options:
No - (default) Does not validate the newsletter subscription request.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.
Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.

Enable for Gift Card

Website

(Adobe Commerce only) Specifies the type of reCAPTCHA that is used when customers enter a gift card code. Options:
No - (default) Does not validate the gift card code submission.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior i.n the background without requiring interactions based on score.
Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.

Enable for Invitation Create Account

Website

Specifies the type of reCAPTCHA that is used when customers send an account creation invitation code. Options:
No - (default) Does not validate the invitation email submission.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior i.n the background without requiring interactions based on score.
Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.

Enable for Send to Friend

Website

Specifies the type of reCAPTCHA that is used when customers share a product with a friend. Options:
No - (default) Does not validate the email submission.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.
Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.

Enable for Wishlist Sharing

Website

Specifies the type of reCAPTCHA that is used when customers share a wishlist. Options:
No - (default) Does not validate the message and email submission.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior i.n the background without requiring interactions based on score.
Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.

Enable for Coupon Codes

Website

Specifies the type of reCAPTCHA that is used when customers enter a coupon code. Options:
No - (default) Does not validate the coupon code submission.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior i.n the background without requiring interactions based on score.
Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.

Enable for PayPal Payflow Pro payment form

Website

Specifies the type of reCAPTCHA that is used when customers pay for a purchase with PayPal Payflow Pro. Options:
No - (default) Does not validate the password reset request.
reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.
Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.
Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.

recommendation-more-help

d39aca6f-58a0-41c6-83eb-39fd0ef30672