Setting reCAPTCHA for your website flows
Use the reCAPTCHA page in Subscriptions Settings to configure your site's protection against bots and malicious actors.
You can protect user registration, sign-in, one-time access links, password reset, and checkout flows.
Arc XP supports both of Google's reCAPTCHA versions:
reCAPTCHA v2 - shows direct challenges to users, like check boxes or image selection.
reCAPTCHA v3 - runs in the background and generates behavior-based user scores.
Your news platform's security team recently spotted suspicious login attempts from bots creating fake accounts to use your free trial offer.
You decide to implement reCAPTCHA v3 for user registration and checkout flows, resulting in a reduction of suspicious activities while maintaining a smooth experience for legitimate users.
Procedure
To configure reCAPTCHA for your website flows, complete the following:
Navigate to Subscriptions > Settings > Security > reCAPTCHA. The Google reCAPTCHA configuration page opens.
Select your desired reCAPTCHA version, v2 or v3.
Create reCAPTCHA keys for your site through the Google Developer Console.
Enter the required fields:
For reCAPTCHA v2, enter the following:
Site key - enter the site key created in Google reCAPTCHA.
Secret key - enter the secret key created in Google reCAPTCHA.
For reCAPTCHA v3, enter the following:
Site key - enter the site key created in Google reCAPTCHA.
Secret key - enter the secret key created in Google reCAPTCHA.
Risk threshold - set a value between 0.0 and 1.0; higher values increase the risk of blocking legitimate users.
Click Save settings at the top of the page.
Toggle on the Arc XP features where you want to enable reCAPTCHA:
User registration - protect the registration process.
User sign in - protect each login attempt.
Reset password - protect password reset requests.
One-time access link - protect one-time access link requests.
Checkout - protect purchases.
Click Save settings at the top of the page.