Quotas and limits

This document contains current content limits and request quotas for reCAPTCHA Enterprise. This page will be updated to reflect any changes to these restrictions and usage limits.

Request quotas

The current API usage quotas are as follows (and are subject to change):

Request Quota Value
Requests per calendar month (if billing is not enabled) 1 million
Requests per minute 60000
MFA Requests via email per email address per day 10
MFA Requests via SMS per phone number per day 10
MFA Requests via SMS per phone number per 4 hours 5
MFA Requests (email/SMS) per day 10000

These limits apply to each Google Cloud console project and are shared across all applications and IP addresses using that project.

When you reach a quota limit

When your API usage quotas exceed the specified quotas limit, any new request returns an HTTP error with a Resource Exhausted (429) status code.

For V2, an end-user-visible error message is shown similar to the following message: This site is exceeding reCAPTCHA quota.

What to do if you expect to go over the quotas

To use reCAPTCHA Enterprise above the monthly free quota, enable billing for your Google Cloud project. The monthly assessment quota is reset on the first day of each month.

If you expect to exceed other quotas, reach out to your assigned Google Cloud sale point of contact. If you do not have an assigned Google Cloud sale point of contact, contact Google Cloud sales.

For more information about quota errors and status codes, see Quota errors.