Add Google reCAPTCHA to your site
Invisible reCAPTCHA v3 bot scoring on every form on your site. Low-scoring or token-less submissions are rejected on the server before they reach your inbox.
Updated 2026-11-02
01What it does
- Contact, lead and widget forms on the published site
02What you need
- Site key. A reCAPTCHA v3 site key from the Google reCAPTCHA admin console.
- Secret key — kept encrypted, never shown again. The matching v3 secret key. Stored encrypted; used only server-side to verify tokens.
03Connect it
- Open the Google reCAPTCHA admin console and register a new site: choose Score based (v3) and add your domains (yourname.curateone.ai and any custom domain).
- Copy the Site key.
- In Studio → ⋯ → Widgets → Google reCAPTCHA, switch it on.
- Paste the "Site key", then paste the matching "Secret key" — it is stored encrypted and used only server-side.
- Save, then Publish — widgets go live with your next publish, not before.
04Check it works
- Submit a form on the live site — it still goes through.
- In the reCAPTCHA admin console, the site shows requests within a few minutes.
05If it does not work
- Every submission is rejected — The keys are v2, or your domain isn't on the key's domain list. Create a v3 key with every domain the site is served on.
- Forms stopped working after adding a custom domain — Add the custom domain to the reCAPTCHA key's domain list.