7/5/22: For the lastest information on reCAPTCHA v3, please see reCAPTCHA v3.
This guide will review how to set up ReCaptcha reCAPTCHA v3 in Aspenware Commerce. For more information about ReCaptcha (including former versions of ReCaptcha available through Aspenware Commerce) see our documentation hubgeneral release notes, please see 2.29 Commerce Release Notes. For a general overview of reCAPTCHA see Google ReCaptcha reCAPTCHA v3 documentation.
Overview
The new reCAPTCHA v3 API helps you detect abusive traffic without user interaction. Instead of showing a CAPTCHA challenge (as with older versions), reCAPTCHA v3 returns a score. Resorts can then choose the most appropriate action for their websites according to this score. Because scores are determined by monitoring user interaction on your site, Aspenware recommends implemented implementing reCAPTCHA to begin site monitoring as soon as possible and across all possible interactions. In addition to disabling at any time, reCAPTCHA thresholds can also be adjusted see below for instructions on how to enable on Aspenware Commercebe adjusted and the feature can also be disabled at any time.
Configuration Guide
...
Prerequisite Step
In order to user use reCAPTCHA v3 you will need to register your site and get your reCAPTCHA public and private keys at https://www.google.com/recaptcha/admin/create.
...
Detailed Setup Guide
Once you have your public and private reCAPTCHA keys, you can configure the feature in Aspenware Commerce by completing the following steps:
Select “reCAPTCHA v3”
Go to Aspenware Admin > Configuration > General Settings
Insert your public (site) and private (secret) keys.
sub bullet
...
Select > Advanced
Scroll down to the reCAPTCHA section
Click ‘Enable’ if reCAPTCHA v3 is not already enabled
Select each of the other locations you would like reCAPTCHA v3 to monitor your site
Note: to receive the best sevurity benefits, Aspenware recommends resorts enable reCAPTCHA v3 to all locations
by checking the box next to that function (e.g. “Enable on checkout payment page” or “Enable on vouchers module”)
| Info |
|---|
NOTE: Aspenware recommends enabling reCAPTCHA v3 on all locations for maximum security benefit. |
Enter the following:
reCAPTCHA public key: Enter your public (site) key obtained above
reCAPTCHA private key: Enter the private (secret) key obtained above
reCAPTCHA Threshold: Set threshold to begin monitoring your siteNote
| Info |
|---|
NOTE: reCAPTCHA learns by seeing real traffic on your site. For this reason, scores in a staging environment or soon after implementing may differ from production. As reCAPTCHA v3 doesn't ever interrupt the user flow, you can first run reCAPTCHA without taking action and then decide on thresholds by looking at your traffic in the admin console. |
...
A threshold of 0 |
...
will ensure that NO ACTION is ever taken |
...
. A default threshold of 5 can be used. For more information on interpreting the score, see the Google reCAPTCHA v3 documentation. |
...