{"id":3023,"date":"2025-12-27T20:58:18","date_gmt":"2025-12-27T20:58:18","guid":{"rendered":"https:\/\/www.swiftcommerce.io\/help\/?post_type=docs&p=3023"},"modified":"2026-03-14T20:35:46","modified_gmt":"2026-03-14T20:35:46","password":"","slug":"recaptcha","status":"publish","type":"docs","link":"https:\/\/www.swiftcommerce.io\/help\/spam\/recaptcha\/","title":{"rendered":"reCAPTCHA"},"content":{"rendered":"\n

Protect your WordPress and WooCommerce site from bots, spam, and malicious attacks using Google reCAPTCHA, Cloudflare Turnstile or hCaptcha integration. This feature adds an extra layer of security to your forms by verifying that submissions come from real humans, not automated bots.<\/p>\n\n\n\n

\n\n\n\n

Overview<\/h2>\n\n\n\n

reCAPTCHA is a free service from Google that protects your website from spam and abuse. Swift Commerce integrates seamlessly with Google reCAPTCHA, Cloudflare Turnstile and hCaptcha allowing you to choose the best option for your site.<\/p>\n\n\n\n

Getting Started<\/h2>\n\n\n\n

Prerequisites<\/h3>\n\n\n\n

Before enabling reCAPTCHA, you’ll need:<\/p>\n\n\n\n

    \n
  1. A Google account\/Cloudflare Account\/hCaptcha<\/li>\n\n\n\n
  2. reCAPTCHA API keys (Site Key and Secret Key)<\/li>\n\n\n\n
  3. Swift Commerce plugin installed and activated<\/li>\n<\/ol>\n\n\n\n

    Step 1: Register Your Site with Google reCAPTCHA<\/h3>\n\n\n\n
      \n
    1. Go to the Google reCAPTCHA Admin Console<\/a><\/li>\n\n\n\n
    2. Sign in with your Google account<\/li>\n\n\n\n
    3. Fill in the registration form:\n
        \n
      • Label<\/strong>: Enter a name to identify your site (e.g., “My Store”)<\/li>\n\n\n\n
      • reCAPTCHA type<\/strong>: Select either v2 or v3<\/li>\n\n\n\n
      • Domains<\/strong>: Add your website domain(s) without http:\/\/<\/code> or https:\/\/<\/code><\/li>\n<\/ul>\n<\/li>\n\n\n\n
      • Accept the Terms of Service<\/li>\n\n\n\n
      • Click Submit<\/strong><\/li>\n\n\n\n
      • Copy your Site Key<\/strong> and Secret Key<\/strong><\/li>\n<\/ol>\n\n\n\n
        \n

        \u26a0\ufe0f Important<\/strong>: Keep your Secret Key confidential. Never share it publicly.<\/p>\n<\/blockquote>\n\n\n\n

        Step 2: Configure reCAPTCHA in Swift Commerce<\/h3>\n\n\n\n
          \n
        1. Navigate to Swift Commerce \u2192 Spam \u2192 reCAPTCHA<\/strong> in your WordPress admin<\/li>\n\n\n\n
        2. Toggle the Enable reCAPTCHA<\/strong> switch to ON<\/li>\n\n\n\n
        3. Select your reCAPTCHA version (v2 or v3)<\/li>\n\n\n\n
        4. Enter your Site Key and Secret Key<\/li>\n\n\n\n
        5. Choose which pages to protect<\/li>\n\n\n\n
        6. Click Save Settings<\/strong><\/li>\n<\/ol>\n\n\n\n
          \n\n\n\n

          General Tab<\/h2>\n\n\n\n

          The General tab contains the core configuration options for your reCAPTCHA setup.<\/p>\n\n\n\n

          Select reCAPTCHA provider:<\/h3>\n\n\n\n

          Swift Commerce enables users to choose the desired captcha they want to integrate into their website. Currently, Swift Commerce offer integrations for:<\/p>\n\n\n\n

            \n
          • Google reCAPTCHA (free)<\/li>\n\n\n\n
          • Cloudflare Turnstile<\/li>\n\n\n\n
          • hCaptcha<\/li>\n<\/ul>\n\n\n\n
            \"\"<\/figure>\n\n\n\n
            \n\n\n\n

            reCAPTCHA v2 Configuration<\/h3>\n\n\n\n

            API Keys<\/h4>\n\n\n\n
            Field<\/th>Description<\/th><\/tr><\/thead>
            Site Key<\/strong><\/td>The public key displayed on your website. Used to render the reCAPTCHA widget.<\/td><\/tr>
            Secret Key<\/strong><\/td>The private key for server-side verification. Never expose this publicly.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

            Challenge Type<\/h4>\n\n\n\n
            Mode<\/th>Description<\/th>When to Use<\/th><\/tr><\/thead>
            “I’m not a robot” Checkbox<\/strong><\/td>Displays a checkbox users must click. May present an image challenge if suspicious.<\/td>When you want users to actively confirm they’re human<\/td><\/tr>
            Invisible<\/strong><\/td>Runs in the background. Only shows a challenge if suspicious activity is detected.<\/td>When you want protection without interrupting user flow<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
            \n\n\n\n

            reCAPTCHA v3 Configuration<\/h3>\n\n\n\n

            API Keys<\/h4>\n\n\n\n
            Field<\/th>Description<\/th><\/tr><\/thead>
            Site Key<\/strong><\/td>The public key used to load the reCAPTCHA script on your site.<\/td><\/tr>
            Secret Key<\/strong><\/td>The private key for verifying scores server-side.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

            Score Threshold<\/h4>\n\n\n\n

            reCAPTCHA v3 returns a score between 0.0 and 1.0:<\/p>\n\n\n\n

              \n
            • 0.0<\/strong> = Very likely a bot<\/li>\n\n\n\n
            • 1.0<\/strong> = Very likely a human<\/li>\n<\/ul>\n\n\n\n
              Threshold<\/th>Protection Level<\/th>False Positive Risk<\/th><\/tr><\/thead>
              0.3<\/td>Low<\/td>Very Low<\/td><\/tr>
              0.5<\/td>Medium (Recommended)<\/td>Low<\/td><\/tr>
              0.7<\/td>High<\/td>Medium<\/td><\/tr>
              0.9<\/td>Very High<\/td>High<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
              \n

              \ud83d\udca1 Tip<\/strong>: Start with 0.5 and adjust based on your needs. Lower if legitimate users are blocked; raise if spam gets through.<\/p>\n<\/blockquote>\n\n\n\n

              Badge Display<\/h4>\n\n\n\n
              Option<\/th>Description<\/th><\/tr><\/thead>
              Badge<\/strong><\/td>Shows the reCAPTCHA badge in the bottom-right corner of protected pages<\/td><\/tr>
              Hidden<\/strong><\/td>Hides the badge completely<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
              \n

              \u26a0\ufe0f Legal Requirement<\/strong>: If you hide the badge, you must<\/strong> add this to your privacy policy:
              “This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.”<\/em><\/p>\n<\/blockquote>\n\n\n\n

              \n\n\n\n

              Settings Tab<\/h2>\n\n\n\n

              Protected Pages (Free)<\/h3>\n\n\n\n
              Location<\/th>Description<\/th><\/tr><\/thead>
              WordPress Login<\/strong><\/td>Admin login page (wp-login.php). Protects against brute force attacks.<\/td><\/tr>
              WordPress Registration<\/strong><\/td>Prevents spam account creation.<\/td><\/tr>
              Lost Password Form<\/strong><\/td>Blocks automated password reset abuse.<\/td><\/tr>
              WooCommerce Login<\/strong><\/td>Customer login on the My Account page.<\/td><\/tr>
              WooCommerce Registration<\/strong><\/td>Customer registration form.<\/td><\/tr>
              Checkout Page<\/strong><\/td>Protects orders from bot submissions.<\/td><\/tr>
              Comment Forms<\/strong><\/td>Prevents spam comments on blog posts.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

              Protected Pages (Pro) \ud83d\udd12<\/h3>\n\n\n\n
              Location<\/th>Description<\/th><\/tr><\/thead>
              Add Payment Method<\/strong><\/td>When customers add a new card in My Account.<\/td><\/tr>
              Product Reviews<\/strong><\/td>WooCommerce product reviews on product pages.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
              \n\n\n\n

              Appearance (Pro) \ud83d\udd12<\/h3>\n\n\n\n

              Customize how the reCAPTCHA v2 checkbox widget appears.<\/p>\n\n\n\n

              Theme<\/h4>\n\n\n\n
              Option<\/th>Description<\/th><\/tr><\/thead>
              Light<\/strong><\/td>Standard light theme. Best for light-colored websites.<\/td><\/tr>
              Dark<\/strong><\/td>Dark theme. Best for dark-themed websites.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

              Size<\/h4>\n\n\n\n
              Option<\/th>Description<\/th><\/tr><\/thead>
              Normal<\/strong><\/td>Full-size widget (302 x 76 pixels)<\/td><\/tr>
              Compact<\/strong><\/td>Smaller widget for tight spaces (164 x 144 pixels)<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
              \n\n\n\n

              IP Whitelist (Pro) \ud83d\udd12<\/h3>\n\n\n\n

              Bypass reCAPTCHA for specific IP addresses. Useful for internal teams, automated systems, or development environments.<\/p>\n\n\n\n

              Format<\/th>Example<\/th>Description<\/th><\/tr><\/thead>
              Single IP<\/td>192.168.1.100<\/code><\/td>Whitelist one IP address<\/td><\/tr>
              CIDR Range<\/td>10.0.0.0\/24<\/code><\/td>Whitelist a subnet<\/td><\/tr>
              IP Range<\/td>192.168.1.1-192.168.1.50<\/code><\/td>Whitelist a range<\/td><\/tr>
              Comment<\/td># Office IP<\/code><\/td>Add documentation (ignored)<\/td><\/tr><\/tbody><\/table><\/figure>\n","protected":false},"excerpt":{"rendered":"

              Protect your WordPress and WooCommerce site from bots, spam, and malicious attacks using Google reCAPTCHA, Cloudflare Turnstile or hCaptcha integration. This feature adds an extra layer of security to your forms by verifying that submissions come from real humans, not automated bots. Overview reCAPTCHA is a free service from Google that protects your website from […]<\/p>\n","protected":false},"author":101,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"doc_category":[78],"doc_tag":[],"class_list":["post-3023","docs","type-docs","status-publish","hentry","doc_category-spam"],"year_month":"2026-09","word_count":645,"total_views":"118","reactions":{"happy":"0","normal":"0","sad":"0"},"author_info":{"name":"Mansoor Ahmad","author_nicename":"helpadmin","author_url":"https:\/\/www.swiftcommerce.io\/help\/author\/helpadmin\/"},"doc_category_info":[{"term_name":"Spam","term_url":"https:\/\/www.swiftcommerce.io\/help\/docs-category\/spam\/"}],"doc_tag_info":[],"knowledge_base_info":[],"knowledge_base_slug":[],"_links":{"self":[{"href":"https:\/\/www.swiftcommerce.io\/help\/wp-json\/wp\/v2\/docs\/3023","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.swiftcommerce.io\/help\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.swiftcommerce.io\/help\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/www.swiftcommerce.io\/help\/wp-json\/wp\/v2\/users\/101"}],"replies":[{"embeddable":true,"href":"https:\/\/www.swiftcommerce.io\/help\/wp-json\/wp\/v2\/comments?post=3023"}],"version-history":[{"count":3,"href":"https:\/\/www.swiftcommerce.io\/help\/wp-json\/wp\/v2\/docs\/3023\/revisions"}],"predecessor-version":[{"id":3276,"href":"https:\/\/www.swiftcommerce.io\/help\/wp-json\/wp\/v2\/docs\/3023\/revisions\/3276"}],"wp:attachment":[{"href":"https:\/\/www.swiftcommerce.io\/help\/wp-json\/wp\/v2\/media?parent=3023"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/www.swiftcommerce.io\/help\/wp-json\/wp\/v2\/doc_category?post=3023"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.swiftcommerce.io\/help\/wp-json\/wp\/v2\/doc_tag?post=3023"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}