How To: Set up Google reCAPTCHA in Your Store¶

1. Go to Add-ons → Manage add-ons.

2. The Google reCAPTCHA add-on is installed by default; you only need to configure it. Find the add-on and click its name in the list of add-ons.

   

3. Configure the add-on in the pop-up window.

   Note

   • You can get the Site key and Secret here. You’ll need to provide the domain name of your store; for more information, please refer to this article by Google.
   • Site key and Secret values for reCAPTCHA v2: Checkbox and reCAPTCHA v3 are different. You have to get them for each reCAPTCHA version individually.
   • If you use multiple storefronts in CS-Cart and want to use Google reCAPTCHA for all of them, then you will only need one site key and secret. Just specify multiple domains when setting up your site key and secret on the Google side.
   • reCAPTCHA v2 settings:
     • Site key—one of the two required credentials; it is used to display the reCAPTCHA widget in your store.
     • Secret—one of the two required credentials; it authorizes communication between your store and the reCAPTCHA server to verify a user’s response. For security purposes, Google asks to keep your secret confidential.
     • Theme—the color of the reCAPTCHA widget in your store; you can choose either Light or Dark. Please refer to Google reCAPTCHA FAQ to preview these themes.
     • Size—the size of the reCAPTCHA widget in your store; you can choose between Normal and Compact.
     • Type—the type of the CAPTCHA that a user must solve when it is necessary to confirm that the user is not a bot; you can choose between Image or Audio.
   • reCAPTCHA v3 settings:
     • Site key—one of the two required credentials.
     • Secret—one of the two required credentials; it authorizes communication between your store and the reCAPTCHA server to verify a user’s response. For security purposes, Google asks to keep your secret confidential.
     • Required rating to pass the check—set the value from 0.1 to 0.9, where 0.9 represents the highest level of strictness. A higher required rating means that Google’s checks will be stricter, and it might even consider some humans as bots. The recommended value is 0.5.
   • Antibot settings—choose what type of antibot protection to enable in your store and where to use it. You can use reCAPTCHA v2: Checkbox and reCAPTCHA v3 at the same time in different forms.
     • Do not use verification if user is logged in—if you tick this checkbox, the logged-in customers will not have to confirm that they are not bots.
     • Do not use verification after first valid answer—if you tick this checkbox, a customer will have to confirm that he or she is not a bot only once per session.

4. (optional) On the Excluded countries tab, choose countries where Google reCAPTCHA will be disabled.

5. Click Save.