After July 2021, the 2.3.x release line no longer received quality updates or user guide updates. PHP 7.3 reached end of support in December 2021, and Adobe Commerce 2.3.x reached end of support in September 2022. We strongly recommend upgrading to Adobe Commerce 2.4.x to help maintain PCI compliance.
Google reCAPTCHA
This site contains archived merchant documentation for a version of Adobe Commerce and Magento Open Source that has reached end-of-support.
The documentation available here is intended for historical reference only and is not maintained.
The Adobe Commerce Merchant Documentation for current releases is published on the Adobe Experience League.
Stores > Settings > Configuration > Security > Google reCAPTCHA
Before Google reCAPTCHA can be configured, you must ensure that your PHP.ini file includes the following setting: allow_url_fopen = 1. This may require developer assistance. See Required PHP Settings.
General
| Field | Scope | Description |
|---|---|---|
| Google API website key | Website | Sets the Google API website key generated when creating your Google reCAPTCHA account. For complete details, see Google reCAPTCHA. |
| Google API secret key | Website | Sets the secret key generated when creating your Google reCAPTCHA account. For complete details, see Google reCAPTCHA. |
| reCaptcha type | Website | Indicates the type of Google reCAPTCHA to use. You must have added the correct API keys for the type. Options: Invisible reCaptcha v3 (default) validates in the background without requiring user interactions based on score. Invisible reCaptcha v2 (recommended) validates in the background without requiring user interactions. reCaptcha v2 validates with the I’m not a robot checkbox. |
Backend
Google reCAPTCHA v2 (“I’m not a robot” Checkbox) Backend
Google reCAPTCHA v2 (Invisible reCAPTCHA badge) Backend
| Field | Scope | Description |
|---|---|---|
| Enable | Global | Indicates if Google reCAPTCHA is enabled for protection of the Magento Admin login screen. Options: Yes, No (default) |
| Theme | Global | Determines the theme used for Google reCAPTCHA box on the Magento Admin login screen. See examples at Google reCAPTCHA. Options: Light Theme (default) / Dark Theme Note: Applicable only to reCaptcha v2(“I am not a robot”). |
| Size | Global | Determines the size for the Google reCAPTCHA box on the Magento Admin login screen. See examples at Google reCAPTCHA. Options: Normal (default) / Compact Note: Applicable only to reCaptcha v2(“I am not a robot”). |
| Minimum score | Global | Determines the minimum score for the Google reCAPTCHA to verify if an interaction on the Magento Admin login screen is legitimate. The value can be from 0.0 to 1.0, where 1.0 is very likely a good interaction, and 0.0 is very likely a bot. See examples at Google reCAPTCHA.Note: Applicable only to Invisible reCaptcha v3. |
Frontend
Google reCAPTCHA v2 (“I’m not a robot” Checkbox) Frontend
Google reCAPTCHA v2 (Invisible reCAPTCHA badge) Frontend
| Field | Scope | Description |
|---|---|---|
| Enable | Website | Indicates if Google reCAPTCHA protection for the storefront pages is enabled. Options: Yes, No (default) |
| Theme | Global | Determines the theme used for the Google reCAPTCHA box on the Magento storefront pages. See examples at Google reCAPTCHA. Options: Light Theme (default) / Dark Theme Note: Applicable only to reCaptcha v2(“I am not a robot”). |
| Language Code | Store View | Determines the languages used for the widget. This forces the UX text to render in the selected language. If not configured, the widget auto-detects the user’s language. |
| Size | Website | Determines the size for the Google reCAPTCHA box on the Magento storefront pages. See examples at Google reCAPTCHA. Options: Normal (default) / Compact Note: Applicable only to reCaptcha v2(“I am not a robot”). |
| Minimum score | Website | Determines the minimum score for the Google reCAPTCHA to verify if an interaction on a Magento storefront page is legitimate. The value can be from 0.0 to 1.0, where 1.0 is very likely a good interaction, and 0.0 is very likely a bot. See examples at Google reCAPTCHA. Note: Applicable only to Invisible reCaptcha v3. |
| Use in login | Website | Adds Google reCAPTCHA to the customer login form. Options: Yes (default) / No |
| Use in Forgot password | Website | Adds Google reCAPTCHA to the forgot password form. Options: Yes (default) / No |
| Use in Contact | Website | Adds Google reCAPTCHA to the contact form. Options: Yes (default) / No |
| Use in Create user | Website | Adds Google reCAPTCHA to the create customer form. Options: Yes (default) / No |
| Use in Review | Website | Adds Google reCAPTCHA to the review form on a product details page. Options: Yes (default) / No |
| Use invisible ReCaptcha in newsletter | Website | Adds Google reCAPTCHA to all storefront pages where newsletter subscription functionality is shown. Options: Yes (default) / No Note: Requires an Invisible ReCaptcha v2 or v3 key. If enabled, a badge will be displayed in every page. |
| Use in PayPal Payflow Pro payment form | Website | Adds Google reCAPTCHA to the PayPal Payflow Pro payform form during checkout. Options: Yes (default) / No Note: This option is available out-of-the-box for v2.3.2 and later. To add the option for v2.3.0 and 2.3.1, see the Magento Support article PayPal Payflow Pro active carding activity. |