Setup overview for websites

This document provides a high-level overview of setting up reCAPTCHA on websites.

Setting up reCAPTCHA on a website involves the following steps:

  1. Create a reCAPTCHA key for your website (also known as key).

    The key is required to collect information about the user actions and send it to reCAPTCHA.

    1. Choose the key type that is best for your use case.
    2. Create a key for your website.
  2. Integrate with your website.

    Install the key that you created on your web pages by using the reCAPTCHA JavaScript API.

  3. Integrate with your backend:

    1. To verify the token sent by reCAPTCHA and assess the risk, create assessments from your backend server.
    2. Interpret the assessment scores and the associated risk, and define how to handle users, for example, allow the user to log in only when the score is high and the risk is low.
  4. Optional: Configure an IP address allowlist

    Add trusted IP addresses to an allowlist to exclude them from reCAPTCHA enforcement.

What's next