Cybersecurity

reCAPTCHA

Google's service for telling people and bots apart on forms and logins.

By Nick Irmo · Updated

What reCAPTCHA means

Older versions show a checkbox or image puzzles; reCAPTCHA v3 runs in the background and returns a score your site uses to decide what to do. The token must be verified on your server.

Why it matters for your website

Spam bots can flood your contact forms, bury real leads and even fill your email list with fake signups. reCAPTCHA helps block that junk so you spend time on real inquiries. Set up poorly, it can also frustrate real visitors and cost you leads.

Example

A landscaping company starts getting dozens of spam form submissions a day. After adding reCAPTCHA to its quote form, most of the spam stops and real requests are easier to spot.

Tips

  • Use a version that checks visitors in the background, so most people never see a puzzle.
  • Mention reCAPTCHA in your privacy policy, since it sends data to Google.
  • Combine it with simple honeypot fields for extra spam protection.

Common mistakes

  • Hiding the reCAPTCHA badge without adding the disclosure text Google requires.
  • Adding hard puzzles to every form, which annoys real customers.

Questions about reCAPTCHA

What is reCAPTCHA?
Google's service for telling people and bots apart on forms and logins.
Can I hide the reCAPTCHA badge?
Google allows hiding the badge if you include its required reCAPTCHA notice and links to Google's privacy policy and terms in the user flow, such as near the form.
Why am I still getting spam with reCAPTCHA?
Some spam comes from real people or advanced bots. Adjust your score settings, add a honeypot field or use a form spam filter alongside it.

Learn more

Tell us what the site needs to do.

Share a few details and a budget range. We reply within one business day with a plan, a platform recommendation and a fixed quote.