*** We recommend upgrading to reCAPTCHA v3 - it works best with the latest version of Chrome ***
Please note that this feature is not yet available on all branches and you may not see it in your WebStore Configuration.
What is reCAPTCHA
reCAPTCHA is a Google service that helps protect your website from spam and abuse. It tells humans and bots apart, and reduces spam by preventing automated submissions.
By using it on your webstore, you prevent bots from creating fake accounts, posting reviews, contacting you via the contact form, basically any user interaction with your store.
How is reCAPTCHA v3 different from reCAPTCHA v2?
With reCAPTCHA v2, users have to perform an interactive test to confirm that they are not bots.
reCAPTCHA v2 is displayed as “‘I’m not a robot” box:
On clicking on a checkbox, a window with images is displayed:
The users need to select all images with the specified element to prove that they are a human.
reCAPTCHA v3 is different from reCAPTCHAv2, because it allows you to verify if an interaction is legitimate without interrupting user actions, or users having to perform tests. Instead, it tracks all the traffic and interactions on your website in the background: how the users click, move the cursor, fill-in information, etc.
In addition to user interaction tracking, reCAPTCHA v3 can use the customer’s Google cookies, if they are present. If a user is logged into a google account, reCAPTCHA v3 can use the information stored in the users cookie to assist in its decision.
Based on the information it retrieves, it ranks the user and returns a score from 0.0 to 1.0, where:
- 0.0 is very likely a bot;
- 1.0 is very likely a good interaction.
reCAPTCHA v3 learns by seeing the real traffic on your website: the more user interactions it registers, the better it works.
Enabling reCAPTCHA v3
For the best results, you might run reCAPTCHA v3 tests on your demostore first. Based on the traffic there, reCAPTCHA v3 will learn to better distinguish between humans and bots.
To enable reCAPTCHAv3, follow these steps:
Fill-in and submit the information on the page, making sure you choose reCAPTCHA v3 in ‘reCAPTCHA type’ section:
Copy Site Key and Secret Key from the page that opens:
In your WebStore Manager go to Settings > All Config Options, and search for Enable reCAPTCHAv3 anti-spam test option.
In the Enable reCAPTCHAv3 anti-spam test option click on the checkbox and enter:
Site Key: paste the key you copied from Google Admin.
Secret Key: paste the key you copied from Google Admin.
Bot Threshold: type in a value between 0 and 1. Interactions ranked below the value you enter will be blocked by reCAPTCHA. By default, you can use a threshold of 0.5.
This value can be adjusted as you see fit, to better suit the traffic on your webstore.
Save the information by clicking on the “Save” button.
You can always adjust Bot Threshold after reCAPTCHA has registered and rated interactions. You can review the Score Distribution for reCAPTCHA v3 in the reCAPTCHA admin panel. In the example below, all interactions have a score of 0.9:
reCAPTCHA v3 will now run on your webstore. You will see a reCAPTCHA box in the bottom right corner of the page, but it will not interrupt any user actions: