Getting started with reCAPTCHA Enterprise: Your quickstart guide to defending your website

[Nick_Troutini]

reCAPTCHA has over a decade of experience defending the internet and data for its network of more than 5 million sites. reCAPTCHA Enterprise builds on this technology with capabilities, such as two-factor authentication and mobile application support, designed specifically for enterprise security concerns. With reCAPTCHA Enterprise, you can defend your website against common web-based attacks like credential stuffing, account takeovers, and scraping and help prevent costly exploits from malicious human and automated actors. And, just like reCAPTCHA v3, reCAPTCHA Enterprise will never interrupt your users with a challenge, so you can run it on all webpages where your customers interact with your services.

In this video, Program Manager Nick Troutini, provides reCAPTCHA Enterprise users the information and resources you need to quickly gain cloud security confidence, stay up-to-date with the latest product updates, and find support when you need it.

You can use the timestamp links to quickly navigate to topics in the video that you’re interested in learning more about: 

01:21 Where to find self-service support resources: documentation, events, and community

02:43 reCAPTCHA Enterprise key onboarding phases

04:03 reCAPTCHA Enterprise Documentation and support: how-to guides, product updates, and how to reach support

04:44 Addressing reCAPTCHA Enterprise FAQs

07:03 The features and benefits of the Security Community: how to create a free account, ask questions, find answers, engage with peers and Googlers, and subscribe and stay up-to-date

11:20 Three simple next steps to get ahead on your cloud security and hit the ground running with reCAPTCHA Enterprise:

1. Sign up and engage with the Google Cloud Security Community: https://www.googlecloudcommunity.com/... 
2. Familiarize yourself with the reCAPTCHA Enterprise Documentation: https://cloud.google.com/recaptcha-en...
3. Follow the step-by-step guide to creating your first assessment: https://cloud.google.com/recaptcha-en...

For easy access, here’s a quick link to all the resources mentioned in the video:

Google Cloud Security Community: https://www.googlecloudcommunity.com/...

reCAPTCHA Enterprise Documentation: https://cloud.google.com/recaptcha-en...

reCAPTCHA Enterprise Release Notes: https://cloud.google.com/recaptcha-en...

Installing and configuring reCAPTCHA Enterprise based on your hosting environment: https://cloud.google.com/recaptcha-en...

Enable reCAPTCHA Enterprise API + Authentication

(GCP: https://cloud.google.com/recaptcha-en...  | Non-GCP: https://cloud.google.com/recaptcha-en...)

Create Site Key & select score-based or checkbox-based site-key:

https://cloud.google.com/recaptcha-en... 

https://cloud.google.com/recaptcha-en...

https://cloud.google.com/recaptcha-en...

Creating an assessment: https://cloud.google.com/recaptcha-en...

Learn how to interpret an Assessment: https://cloud.google.com/recaptcha-en...

Learn how to annotate an Assessment (optional): https://cloud.google.com/recaptcha-en...

reCAPTCHA Enterprise FAQs: https://cloud.google.com/recaptcha-en...

We hope this helps you along your cloud security journey and making the most of reCAPTCHA Enterprise!

[Udaybhan200]

CAPTCHA_CHECK_FAILED : Recaptcha verification failed - SITE_MISMATCH

Hello Google Support Team,

I am encountering the following error while implementing Firebase reCAPTCHA with the Identity Toolkit API for Phone Authentication: in expo mobile app with webview 

{

"error": {

"code": 400,

"message": "CAPTCHA_CHECK_FAILED : Recaptcha verification failed - SITE_MISMATCH",

"errors": [

{

"message": "CAPTCHA_CHECK_FAILED : Recaptcha verification failed - SITE_MISMATCH",

"domain": "global",

"reason": "invalid"

}

]

}

}

I have already tried using the sendVerificationCode method from the Identity Toolkit API on both the server and client sides, but I continue to encounter the same issue.

Could you please assist me in understanding the cause of the SITE_MISMATCH error and how to resolve it? Any guidance on what needs to be configured to avoid this error would be greatly appreciated.

Thank you in advance for your help!

Best regards,
Uday Mishra

[aprilwine]

This is basically a video on how to read documentation. It doesn't actually show how to set up a reCAPTCHA. From what I can tell, actually getting one to work is a complex, 997-step process that even the engineers at Google don't know how to do. I may have to start looking for other options.