How to Implement Google reCAPTCHA to Protect Your Forms from Spam

How to Implement Google reCAPTCHA to Protect Your Forms from Spam

By Michael Chen

January 1, 2025 at 05:14 PM

Google reCAPTCHA protects your forms from spam submissions by implementing an invisible security feature. Here's how to set it up and manage it effectively.

Default Implementation

  • reCAPTCHA v3 runs automatically on most sites
  • Forms on homepages use reCAPTCHA v2
  • No user interaction required for v3 (invisible protection)
  • Automatically enabled on newsletter blocks and product waitlists

Enabling reCAPTCHA on Forms

Form Blocks:

  1. Edit page > Click pencil icon
  2. Go to Storage tab
  3. Select Google reCAPTCHA
  4. Toggle Enable option

Newsletter Blocks:

  1. Edit page > Click pencil icon
  2. Access Storage tab
  3. Connect Squarespace storage
  4. Enable Google reCAPTCHA

Promotional Pop-ups:

  1. Open Promotional pop-up panel
  2. Choose "Sign up for your newsletter"
  3. Click Verification
  4. Select Activate reCAPTCHA

Homepage Forms (Version 7.0)

Setup Process:

  1. Access Development Tools
  2. Go to External API Keys
  3. Get API Keys from Google
  4. Choose reCAPTCHA V2
  5. Add your domain(s)
  6. Copy and paste site/secret keys

"reCAPTCHA I'm not a robot checkbox"

"reCAPTCHA I'm not a robot checkbox"

Copy reCAPTCHA secret key

Copy reCAPTCHA secret key

Google reCAPTCHA form

Google reCAPTCHA form

Troubleshooting Common Issues:

Invalid Domain:

  • Add all domains including integrated domain
  • Allow 30 minutes for updates
  • Ensure correct domain format (without https://)

Invalid Key Type:

  • Use reCAPTCHA V2 for homepages
  • Create new keys if needed
  • Update External API Keys panel

Form Submission Errors:

  • Verify Secret Key formatting
  • Remove any extra spaces
  • Ensure correct key copying

Note: iOS devices may experience scrolling issues due to system conflicts with Google reCAPTCHA.

Related Articles

Previous Articles