Stop bots with Google reCAPTCHA v2 on the sign-up, login and forgot-password pages. Enable it per page and every submission is verified server-side.
What it is
The familiar I am not a robot checkbox, protecting the forms that attract spam accounts and brute-force attempts.
How it works
- Enter your reCAPTCHA v2 Site Key and Secret Key and set the integration Active.
- Tick which pages get the checkbox: Signup, Login and Forgot Password, each separately.
- Every submission is checked with Google on the server, so a bot cannot skip the widget.
- If the keys are missing the checkbox is simply not shown, so customers are never locked out by a half-finished setup.
Where to find it
Admin > Settings > Integrations, section Security.