Configuring ReCaptcha in Reseller Console

reCAPTCHA protects your Storefront from fraud and abuse without creating friction.

reCAPTCHA uses an advanced risk analysis engine and adaptive challenges to keep malicious software from engaging in abusive activities on your website. Meanwhile, legitimate users will be able to log in, make purchases, view pages, or create accounts and fake users will be blocked.

Create reCAPTCHA for website

1. Go to reCAPTCHA admin console https://www.google.com/recaptcha/admin 
2. If you do not have a website, you will be asked to create new one, otherwise click the "Create" button to add new one
3. Enter the convenient label for your website  
4.  Select the type v3 - the Reseller Storefront supports only this versionNote: It is very important to use reCAPTCHA v3. Otherwise, it will not work on Storefront.
5. Add your storefront domain to the list of domains
6. Submit the form
7. After the successful website creation, you will see two inputs with Site Key and Secret Key. Save this keys, they will be used in Reseller Console to enable reCAPTCHA for Storefront. 

Note: Do not worry if you have not saved the keys. They can be retrieved in the reCAPTCHA console at any time. Just select the website, go to Settings, and here you will see the reCAPTCHA keys section.

Configuring the Reseller Console to enable reCAPTCHA for Storefront

1. Login to Reseller Console with your credentials
2. Go to the Account Settings > Storefront > General Setup page, follow the Main Setting tab
3. Enable the Google Re-Captcha by switcher, after this you will be asked to enter the Site Key and Secret Key.
4.  Submit the Save button. After this the keys will be saved and reCAPTCHA will be enabled.
5.   Go to your Storefront site and you will see the next message on Sign In/Sign Up pages:6. Try to Sing In with valid credentials to ensure that all works properly.

Q&A

Q: What to do if I see the error "Recaptcha details are invalid" during Sign In/Sign Up

A:

1. Re-check that the Site Key and Secret Key are correct, and do not contain any extra characters at the beginning, or at the end.
2. Check the setting of the website in reCAPTCHA Admin Console that the Storefront domain is in the list of website domains.

Q: Should I add the production and technical domains to the list of domains?

A: If you expect the reCAPTCHA to work properly both on production and technical domains, you need to add both domains in reCAPTCHA Admin Console.