Integrates with Google reCAPTCHA Enterprise to protect the login page against automated bots and credential-stuffing attacks.

Setting Up reCAPTCHA Enterprise in Google Cloud

1. Open the Google Cloud Console — reCAPTCHA Enterprise.
2. Select or create a project and enable the reCAPTCHA Enterprise API.
3. Click Create Key and choose Website as the platform type.
4. Enter the domain(s) where the login page is hosted.
5. Copy the generated Site Key into the field below.
6. In APIs & Services → Credentials, create an API Key (server-side), restrict it to the reCAPTCHA Enterprise API, and paste it in the API Key field below.
7. Copy your Project ID from the Cloud Console into the Project ID field.

Settings

Type

The reCAPTCHA widget type:

• SCORE (default) – Invisible; assigns a risk score (0.0–1.0) without user interaction.
• CHECKBOX – Displays the classic "I'm not a robot" checkbox.

Project ID

Your Google Cloud project ID.

Site Key

The public key embedded in the frontend page.

API Key

The server-side API key used to call the reCAPTCHA Enterprise Assessment API. Stored encrypted at rest.

Minimum Score

For SCORE type: requests with a score below this threshold are blocked. Range 0.0–1.0; default 0.5. Higher values are more restrictive.

Expected Action

The action name to validate in the assessment. Defaults to login. Must match the action name sent by the frontend.