reCAPTCHA v2, v3 & hCaptcha

CAPTCHA helps protect public Forms and visitor chat from automated activity. Choose a visible reCAPTCHA v2 or hCaptcha checkbox for a Form, or use reCAPTCHA v3 for an assessment that usually needs no visitor interaction. You can connect all three integrations. Connecting another provider does not change a Form or chat preset that is already published.

Before you start

  • Set up your company's Custom URL before protecting a public Form. Share the Form's custom-domain link. A Form opened on the shared platform address follows the existing CAPTCHA bypass.
  • Register the intended domains with Google for reCAPTCHA keys. If you enable hCaptcha domain allowlisting, add the intended domain there too. Keep each provider's Site Key and Secret Key together. Google reCAPTCHA v2 and v3 need separate key pairs.
  • Open the flyout menu and go to Integrations. The cards appear in this order: Google reCAPTCHA v2, Google reCAPTCHA v3, then hCaptcha.

Set up Google reCAPTCHA v2

  1. In the Google reCAPTCHA registration, create a key pair for reCAPTCHA v2 and the “I'm not a robot” Checkbox. Add the domain of the custom URL you will use for protected Forms.
  2. Copy the new site key and secret key. In Integrations, find Google reCAPTCHA v2 and enter them in Site Key and Secret Key.
  3. Select Connect reCAPTCHA, then add a CAPTCHA field to the Form you want to protect. Test the Form on its custom-domain link before sharing it.

Google reCAPTCHA v2 integration showing the Site Key, Secret Key, and Connect reCAPTCHA button outlined in red

Visitors see a checkbox. Google may ask them to complete an additional challenge.

Example of the reCAPTCHA v2 I'm not a robot checkbox

Set up Google reCAPTCHA v3

  1. In Google reCAPTCHA registration, create a separate reCAPTCHA v3 key pair. Register the custom Form domain and every website that will host a protected chat embed. A v2 key pair cannot be used for v3.
  2. In Integrations, find Google reCAPTCHA v3 and enter its Site Key and Secret Key.
  3. Select Save reCAPTCHA v3 Keys. The configured state means both keys were saved. Test a Form or chat on the intended website before sharing it with visitors.

Google reCAPTCHA v3 integration showing the Site Key, Secret Key, and Save reCAPTCHA v3 Keys button outlined in red

Connecting v3 does not switch any existing v2 or hCaptcha Form or chat preset. Select v3 on each experience where you want to use it.

Set up hCaptcha

  1. Create or sign in to an account on the hCaptcha dashboard. Get the site's public site key from Sites and the secret key from Settings. If domain allowlisting is enabled for the site key, include the domain of your custom Form link.
  2. In Integrations, find hCaptcha and enter the keys in Site Key and Secret Key.
  3. Select Connect hCaptcha, then add a CAPTCHA field to the Form you want to protect. Test the Form on its custom-domain link before sharing it.

hCaptcha integration showing the Site Key, Secret Key, and Connect hCaptcha button outlined in red

Visitors see a checkbox and may be asked to complete a challenge.

Example of the hCaptcha I am human checkbox

Add CAPTCHA to a Form

  1. Go to Forms and open or create an eligible public Form. See the Forms overview for help using the builder.
  2. Under Advanced Blocks, choose CAPTCHA. Open the new CAPTCHA field's configuration.
  3. Select reCaptcha, reCAPTCHA v3, or hCaptcha, according to the connection you want this Form to use. For a visible v2 or hCaptcha checkbox, you can also choose Dark Mode or Compact Layout.
  4. Save the Form and test a submission on its custom-domain link. Only one provider is selected for that CAPTCHA field.

CAPTCHA in the Form builder Advanced Blocks menu

Example of the reCaptcha and hCaptcha choices in an expanded CAPTCHA field when those integrations are connected

The example shows the two visible providers. If v3 is also connected, its choice appears in the same field. The Dark Mode and Compact Layout options change the appearance of a visible checkbox.

If the CAPTCHA block or a provider choice is missing, check the company's Custom URL and that provider's connection in Integrations. A Form opened on the shared platform address does not use the selected CAPTCHA.

Use CAPTCHA for visitor chat

Existing chat presets keep their saved Automatic choice, including their current reCAPTCHA v2 or hCaptcha behavior. To use v3 on one chat preset, open its Advanced Options, choose reCAPTCHA v3, add at least one allowed website host for the embed, and save. Other presets stay as they were.

What visitors see and how to retry

A Form using v2 or hCaptcha asks the visitor to complete its visible checkbox before submission. A Form or chat preset using v3 requests an assessment when the visitor submits or starts chat, normally without a visible challenge. If v3 cannot complete or is refused, the action stops. The visitor can try again without losing Form answers or the chat welcome entries.

You can switch an individual Form or chat preset to another connected provider without changing other experiences. Before disconnecting v3 keys, switch any published Forms and saved chat presets that use v3. If v3 is still in use, Integrations keeps the keys connected and identifies affected experiences.