Security > Google reCAPTCHA Storefront
IMPORTANTBefore Google reCAPTCHA can be configured, you must ensure that your
PHP.ini file includes the following setting: allow_url_fopen = 1. This may require developer assistance. See PHP Settings in the Installation Guide.To access the store configuration settings, choose Stores > Settings > Configuration from the Admin sidebar.
For more information about using Google reCAPTCHA to secure your store, see Google reCAPTCHA in the Admin Systems Guide.
reCAPTCHA v2 (“I am not a robot”)
| Field | Scope | Description |
|---|---|---|
| Google API Website Key | Website | The website key that is created when you register your Google reCAPTCHA account. |
| Google API Secret Key | Website | The secret key that is associated with your Google reCAPTCHA account. |
| Size | Website | The size of the Google reCAPTCHA box that appears when a customer logs in to their account. Options: Normal (default) / Compact |
| Theme | Website | Determines the style of the Google reCAPTCHA box. Options: Light Theme (default) / Dark Theme |
| Language Code | Store view | The two-character code that specifies the language that is used for Google reCAPTCHA text and messaging. |
reCAPTCHA v2 Invisible
| Field | Scope | Description |
|---|---|---|
| Google API Website Key | Website | The website key that is created when you register your Google reCAPTCHA account. |
| Google API Secret Key | Website | The secret key that is associated with your Google reCAPTCHA account. |
| Invisible Badge Position | Website | The position of the invisible reCAPTCHA badge on each page. Options: Inline / Bottom Right / Bottom Left |
| Theme | Global | Determines the style of the Google reCAPTCHA box. Options: Light Theme (default) / Dark Theme |
| Language Code | Store view | A two-character code that specifies the language that is used for Google reCAPTCHA text and messaging. |
reCAPTCHA v3 Invisible
| Field | Scope | Description |
|---|---|---|
| Google API Website Key | Website | The website key that is created when you register your Google reCAPTCHA account. |
| Google API Secret Key | Website | The secret key that is associated with your Google reCAPTCHA account. |
| Minimum Score Threshold | Global | The minimum score that identifies a user interaction as a potential risk, where 1.0 is a typical user interaction, and 0.0 is likely a bot. Default: 0.5 |
| Invisible Badge Position | Website | The position of the invisible reCAPTCHA badge on each page. Options: Inline / Bottom Right / Bottom Left |
| Theme | Website | Determines the style of the Google reCAPTCHA box. Options: Light Theme (default) / Dark Theme |
| Language Code | Store view | A two-character code that specifies the language that is used for Google reCAPTCHA text and messaging. |
reCAPTCHA Failure Messages
| Field | Scope | Description |
|---|---|---|
| reCAPTCHA Validation Failure Message | Store view | The message that is displayed in the storefront if verification fails. Default text: reCAPTCHA verification failed. |
| reCAPTCHA Technical Failure Message | Store view | The message that is displayed in the storefront if reCAPTCHA fails to return a verification result. Default text: Something went wrong with reCAPTCHA. Please contact the store owner. |
Storefront
NOTEThe reCAPTCHA type that you choose must match the type that is associated with the API key from your Google reCAPTCHA account.
WARNINGWhen using reCAPTCHA version 3, a genuine user with low score cannot proceed. For version 2, a genuine user with a low score receives a challenge. Consider carefully if genuine users with a low score should have an opportunity to solve a challenge (version 2) or be blocked (version 3).
| Field | Scope | Description |
|---|---|---|
| Enable for Customer Login | Website | Specifies the type of reCAPTCHA that is used when customers sign in to their accounts. Options:No - (default) Does not validate the login request.reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score. |
| Enable for Forgot Password | Website | Specifies the type of reCAPTCHA that is used when customers request a password reset. Options:No - (default) Does not validate the password reset request.reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score. |
| Enable for Create New Customer Account | Website | Specifies the type of reCAPTCHA that is used when customer signs up for a new account. Options:No - (default) Does not validate the account request.reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score. |
| Enable for Edit Customer Account | Website | Specifies the type of reCAPTCHA that is used when customer changes their account information. Options:No - (default) Does not validate the account request.reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score. |
| Enable for Create New Company Account | Website |
No - (default) Does not validate the account request.reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.
|
| Enable for Contact Us | Website | Specifies the type of reCAPTCHA that is used to send a message from the Contact Us page of your store. Options:No - (default) Does not validate the message request.reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score. |
| Enable for Product Review | Website | Specifies the type of reCAPTCHA that is used when customers submit a product review. Options:No - (default) Does not validate the product review request.reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score. |
| Enable for Newsletter Subscription | Website | Specifies the type of invisible reCAPTCHA that is used when customers sign up for a newsletter subscription. Options:No - (default) Does not validate the newsletter subscription request.reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score. |
| Enable for Gift Card | Website |
No - (default) Does not validate the gift card code submission.reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.Invisible reCAPTCHA v2 - Validates user behavior i.n the background without requiring interactions based on score.Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score.
|
| Enable for Invitation Create Account | Website | Specifies the type of reCAPTCHA that is used when customers send an account creation invitation code. Options:No - (default) Does not validate the invitation email submission.reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.Invisible reCAPTCHA v2 - Validates user behavior i.n the background without requiring interactions based on score.Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score. |
| Enable for Send to Friend | Website | Specifies the type of reCAPTCHA that is used when customers share a product with a friend. Options:No - (default) Does not validate the email submission.reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score. |
| Enable for Wishlist Sharing | Website | Specifies the type of reCAPTCHA that is used when customers share a wishlist. Options:No - (default) Does not validate the message and email submission.reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.Invisible reCAPTCHA v2 - Validates user behavior i.n the background without requiring interactions based on score.Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score. |
| Enable for Coupon Codes | Website | Specifies the type of reCAPTCHA that is used when customers enter a coupon code. Options:No - (default) Does not validate the coupon code submission.reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.Invisible reCAPTCHA v2 - Validates user behavior i.n the background without requiring interactions based on score.Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score. |
| Enable for PayPal Payflow Pro payment form | Website | Specifies the type of reCAPTCHA that is used when customers pay for a purchase with PayPal Payflow Pro. Options:No - (default) Does not validate the password reset request.reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score. |
recommendation-more-help