ReCAPTCHA registration flow
reCAPTCHAs are used to distinguish humans from automated bots, protecting websites from malicious activities like spam, fake registrations, data scraping, and brute-force attacks by presenting challenges that are difficult for computers but easy for humans to solve. They enhance online security, prevent abuse of services, ensure fair use of resources, and safeguard sensitive processes like online purchases and voting.
To setup reCAPTCHA during registration, follow these steps:
Click on Authentication in the sidebar.
Click on the kebab menu (three dots) on the right side of the registration flow. Click on Duplicate. A popup will appear.
In the popup, enter a Name for the flow, "ReCAPTCHA".
Click on Duplicate. You will be redirected to the flow configuation.
Click on the settings menu (gear icon) on the right side of the reCAPTCHA. A popup will appear to configure the reCAPTCHA.
Give it an alias. Enter your reCAPTCHA Site Key and reCAPTCHA Secret. You can turn on the Use recaptcha.net switch to utilize recaptcha.net for the CAPTCHA. If you want to use reCAPTCHA v3, you can turn on reCAPTCHA v3 switch.
Field NameField TypeDescriptionAlias
Text
Enter the Alias for the flow as required
Recaptcha Site Key
Text
Enter the value for the Recaptcha Site Key as generated from the Google reCAPTCHA portal.
Recaptcha Secret
Text
Enter the value for the Recaptcha Secret Key as generated from the Google reCAPTCHA portal.
Use recaptcha.net
Toggle
When activated, it utilizes recaptcha.net; when deactivated, it defaults to google.com.
Click Save.
Change the Requirement for reCAPTCHA from Disabled to Required.
Click on the Actions, on the top right of the page, and then Bind flow. A popup will appear.
Select the Registration flow.
Click Save.
Click on Realm Settings.
Click on the Security Defenses tab and change the X-Frame-Options and Content-Security-Policy as required.
Click Save.
Last updated