How to Enable and Configure Google reCAPTCHA for Spam Prevention
Google reCAPTCHA helps prevent spam submissions on your forms by adding an invisible security layer. Here's how to implement it effectively:
Default Implementation
- Automatically enabled for:
- Newsletter blocks
- Form blocks
- Product waitlists
- Uses reCAPTCHA v3 (invisible, no user interaction needed)
- Cover pages use reCAPTCHA v2 (requires checkbox verification)
Enabling reCAPTCHA
Form Blocks:
- Click Edit on page
- Click pencil icon on form block
- Navigate to Storage tab
- Click Google reCAPTCHA
- Enable the toggle
Newsletter Blocks:
- Edit page and click pencil icon
- Go to Storage tab
- Connect Squarespace storage
- Enable Google reCAPTCHA toggle
Promotional Pop-ups:
- Open Promotional pop-up panel
- Select Action > Sign up for newsletter
- Click Verification
- Check "Turn on reCAPTCHA"
Cover Page Forms Setup (Version 7.0):
- Open Developer tools > External API Keys
- Get Google reCAPTCHA API Keys
- Configure settings:
- Choose reCAPTCHA V2
- Select "I'm not a robot" Checkbox
- Add all domains (built-in and custom)
- Accept terms of service
- Copy and paste Site Key and Secret Key
reCAPTCHA checkbox verification interface
Blank website CAPTCHA field
Google reCAPTCHA verification interface
Troubleshooting
Common Issues:
- Invalid domain error: Add all domains in Google reCAPTCHA settings
- Invalid key type: Use reCAPTCHA V2 for cover pages
- Submission errors: Check for correct Secret Key format
- iOS scrolling issue: Known limitation between iOS and Google
Domain Updates:
- Access Developer tools > External API Keys
- Update domains in Google reCAPTCHA settings
- Allow 30 minutes for changes to take effect