reCAPTCHA

Dear sirWe’re writing to inform you that all Google reCAPTCHA keys will need to be migrated to a Google Cloud project by the end of 2025. This will unite all reCAPTCHA customers under a single set of terms, a consistent pricing structure, and provide access to advanced security features.We’ve provided additional information below to guide you through this change.What you need to doWe will apply the change in phases throughout the year, reaching out again by email when your keys become eligible. At that time, we will automatically create a Google Cloud project for you and associate your keys to it.However, we recommend that you get ahead of this process by following these instructions to manually migrate from reCAPTCHA Classic. This way you will be able to prescribe exactly which Google Cloud project you’ll associate with your key. Once you complete this process, the following features will be enabled immediately via Google C

We are an e-commerce team currently facing persistent issues with Google reCAPTCHA v3 returning very low scores on iOS apps. This started recently and seems to correlate with Apple’s changes in iOS 26, where User-Agent strings are now frozen.Apple introduced User-Agent freezing in iOS 26, which reports incorrect OS versions (e.g., showing iPhone OS 18_6 instead of 26). This change is part of Apple’s privacy-driven signal reduction strategy. While it improves privacy, it can confuse device detection systems and potentially impact Google’s machine learning model for reCAPTCHA scoring, which relies on signals like user-agent for risk analysis.We’ve observed:Scores dropping below 0.4 primarily for iOS traffic.Questions for the community:Has anyone else experienced similar low-score issues o

I have a question regarding test keys. Do they count towards billable assessments? 

How can we make captcha better by signing in with the verification of pictures and things. In my opinion we should only l have a password. 

In this lab I am having problem with “Task 4 Create and deploy the reCAPTCHA session token and test site key”. I did every steps and successfully but when I click in “check my progress” I receive “Please configure the HTML files as mentioned in the instructions”… Who can help me please with 

We are trying to use recaptcha on a contact form on one of our projects, however we are encountering this message on submit: We're sorry, but your computer or network may be sending automated queries. To protect our users, we can't process your request right now. We tried different networks, using vpn and not using vpn, different computers and differnt device types (eg. mobile phone etc.), we also tried different keys, as well as enterprise Keys and V3 keys all of those tests lead to the same Error message.We´d appreciate any pointers on where we could debug furhter. 

Is there a way to make the images in ReCaptcha V2 accessible by keyboard?

Hello.I've a simple question about the billing of the reCAPTCHA.To clarify, the charge for the use of reCAPTCHA is only applicable after it is working in Google Cloud ?I mean, in the meantime I won't get billed if I get more than 10000 evaluations before the migration ? Thanks in advance.  

Last year I added the Wordfence plugin to my woocommerce/wordpress site to add a level of security to my online shop. I set up the reCaptcha V3 site key and reCaptcha v3 Secret via the Google console - It was a while ago, but it all worked and set up fine. I was just checking through settings today and in the google console I was prompted to migrate and switch to Google Cloud, so I did so and now my reCaptcha status is saying I’m unprotected and I have no idea how to resolve this.I don’t fully understand any of this, so if someone could help explain what I need to do to resolve this all and to protect my website, I’d really appreciate it.When I click on the word Unprotected, I get a popup saying the following with a link to ‘Request Tokens’ UnprotectedYour key isn't requesting tokensYour key was requesting tokens (executes), but isn't any more. Something is set up incorrectly in your

Hi there,Thank you for your time.I previously submitted this question through the contact form, but I haven’t received a response, so I’m posting it here instead.Sorry for the trouble, but I’d appreciate your help with the following questions:1. Free Usage of Google reCAPTCHAI understand that to continue using reCAPTCHA for free, billing must be disabled.Is it correct that if the number of assessments exceeds 10,000 per month, users can still access the site or app, but reCAPTCHA itself will stop functioning?2. Billing Information and SettingsWhen I checked the current billing information, I couldn’t find any details—it seems unclear.Could you please advise how to confirm the billing account details?Also, if a billing account does exist, I’d appreciate it if you could check whether billing is currently enabled.3. Assessment Volume and Free UsageWe currently

<meta charset="utf-8"><!--#include virtual="/includes/SendMail.asp"--><script src="https://www.google.com/recaptcha/api.js?render=blabla1"></script><!--#include virtual="/includes/aspJSON1.9.asp"--><% If (trim(Request.Form("SendEmail")) = "Yes") Then Name = Trim( [removed by moderator] ) Dim objXmlHttp Set objXmlHttp = Server.CreateObject("Msxml2.ServerXMLHTTP") url = "https://www.google.com/recaptcha/api/siteverify?secret=blabla2&remoteip=" & Request.ServerVariables("REMOTE_ADDR") & "&response=" & trim(Request.Form("g-recaptcha-response")) objXmlHttp.open "POST", url, False objXmlHttp.setRequestHeader "Content-Type", "application/json" objXmlHttp.send() Set oJSON = New aspJSON oJSON.loadJSON(objXmlHttp.responseText) if oJSON.data("success") then strSu

We have ReCAPTCHA enterprise and have integrated with ReCAPTCHA v3 in our online application. Since about two weeks ago, ReCAPTCHA has been giving low scores, i.e. below 0.5, to a lot of our online users which prevented them from logging into their accounts. The number of low scores has increased by fivefold as compared to a couple of weeks ago, and is still in a trend of increasing.Could you advise what might be the reason behind this, given we haven't made a change to our ReCAPTCHA implementation?

I'm using Content-Security-Policy (CSP) on my website. And have setup CSP as below as per mentioned at the google developers documentation (Frequently Asked Questions  |  reCAPTCHA  |  Google for Developers😞- script-src https://www.google.com/recaptcha/, https://www.gstatic.com/recaptcha/- frame-src https://www.google.com/recaptcha/, https://recaptcha.google.com/recaptcha/But browser devtools console indicated that is an error related to CSP occurred which related to CSP's directive "connect-src". But as I find thru the develo

I  uses google captcha v3 for bot protection for submissions , and based on the documentation provided in https://cloud.google.com/recaptcha/docs/migration-overview, seems like we need to move our keys to google cloud.1. The document says users were notified of the change, but I did not receive any details on the registered gmail account. Can you please let me know how the details are shared so that we don't miss them in future.2.  Can you please share the exact date by when this needs to be completed? The document says October.3. After the migration, if we do not wish to make any code change to switch to enterprise api, can you share how the server side validation with siteverify continue to works? Behind the scene is it still using the same private classic key?4. Please confirm that without any code change, just switching the k

Hello,According to the official documentation, "Deprecation and shutdown policy for mobile SDKs," after Q3 2025, backend calls to projects.assessments.create will fail.I would like to clarify the exact expected behavior on the Android client side for the SafetyNet.verifyWithRecaptcha API call after this shutdown.Specifically, for the following code:SafetyNet.getClient(activity) .verifyWithRecaptcha(siteKey) .addOnSuccessListener { response -> // Scenario 2: Does it succeed here with an invalid token? } .addOnFailureListener { e -> // Scenario 1: Does it fail here directly? }After the Q3 2025 deadline, which of these two scenarios should we expect? Direct Client-Side Failure: The call itself will fail, and the addOnFailureListener will be triggered i

Hello everyone,According to the official documentation, "Deprecation and shutdown policy for mobile SDKs," after Q3 2025, backend calls to projects.assessments.create will fail.I would like to clarify the exact expected behavior on the Android client side for the SafetyNet.verifyWithRecaptcha API call after this shutdown. Specifically, for the following code:SafetyNet.getClient(activity) .verifyWithRecaptcha(siteKey) .addOnSuccessListener { response -> // Scenario 2: Does it succeed here with an invalid token? } .addOnFailureListener { e -> // Scenario 1: Does it fail here directly? }After the Q3 2025 deadline, which of these two scenarios should we expect? Direct Client-Side Failure: The call itself will fail, and the addOnFailureListener will be trigg

Timeframe:Since 09:00 on 28/08/2025 (GMT) we have been getting errors which seem to be related to google reCAPTCHACall is made to:https://www.google.com/recaptcha/api2/clr?k=6LeeZmsfAAAAAK-SB2w-6_XpkLha7vsRLlRvH8e1 Issue:Because of the errors it is blocking our endpoints from being successful. This call is being made immediately after an internal server call that we make, example below Question:

On reCAPTCHA I do see two domains that I once used, but they are not valid/available anymore; they do not use reCAPTCHA anymore. How to delete those entries from the reCAPTCHA portal?

We have a number of clients who have access to their reCAPTCHA keys currently via the console. We usually create the keys, then invite the client as an owner of the site. Other clients may even have multiple owners in their organisation. Presumably anyone with access to a reCAPTCHA key will be getting emails about keys for migration.If no action is taken and the keys are migrated automatically, where will the GCP project be created and who will have access to the new project? If there is a single owner, how is the owner determined as reCAPTCHA’s existing admin console doesn’t seem to provide a way of determining who the person who originally created the key is?

Hi guys,this morning I tried to open my instagram app but there was a recaptcha verification Everythime when I try to do it it says Captcha solution is not correct I tried different browsers like google chrome firefox opera  I tried also logging from other devices(I can login but can't complete reCAPTCHA)And I can't write to instagram support because I can't even see my homepage in instagram so I can start conversationPlease someone help me

How to choose standard plan for recaptchaHere is the plans for recaptchahttps://cloud.google.com/security/products/recaptcha?hl=en#pricingI want to go for "reCAPTCHA Standard".I created  "reCAPTCHA Essentials" and  manage recaptcha from for https://www.google.com/u/2/recaptcha/admin/site/xxxand display key details at https://console.cloud.google.com/security/recaptcha/xxxI used 4K of 10K so far. I enabled billing (free trial currently). And I created reCAPTCHA Enterprisehttps://www.google.com/recaptcha/admin/enterpriseBut I cannot fi

I have a monitoring probe and the recaptcha is blocking it. I've tried everything, including whitelisting, and it still doesn't work. I'd like to hear about your experiences with this.

 I received email from Google Cloud. Then I registered here.Is this working ?? I don’t use it on my website. How can I do for you ?And I use CloudFlare.  So I would like to delete this domain.Thank you for support.I don’t need to use this for now.

Buenas díasHe recibido el siguiente correo electrónico: “A principios de este año, te informamos de que todas las claves de Google reCAPTCHA deberán migrarse a proyectos de Google Cloud antes de que acabe el 2025.”En el correo también dice lo siguiente: “Uso y facturación:De media, tu uso mensual de reCAPTCHA tiene 68 evaluaciones en los tres últimos meses. Puedes introducir esa cantidad en esta calculadora de precios para estimar los cargos que se aplicarán a tu uso. También puedes consultar más información sobre 

 I received email from Google Cloud. Then I registered here.And I use CloudFlare.  So I would like to delete this domain.Thank you for support.I don’t need to use this for now.