What is reCAPTCHA?

reCAPTCHA is Google's invisible bot check. When it is on, CartWhizz asks Google how likely it is that a visitor is a real person before accepting a login, new account or password reset request on your store. Bots that try thousands of passwords or create fake accounts are turned away.

It is reCAPTCHA v3, so shoppers never solve puzzles or tick "I'm not a robot". Google gives each request a score from 0.0 (bot) to 1.0 (human) and CartWhizz refuses requests below your Minimum Score.

No keys needed. CartWhizz provides the Google reCAPTCHA keys for every store. You only switch it on and, if you like, adjust the score. It is in Settings → Settings → Security → reCAPTCHA v3.

What it covers today: your store's customer login, registration and password-reset requests. It does not cover checkout, your admin login, or contact and custom forms (custom forms in My store → Forms have their own built-in spam trap).

Before relying on it, test login, registration and Forgot password in a private window after switching it on. See Edge cases: password reset requests are currently refused while reCAPTCHA is on.