Implement reCAPTCHA with Custom Login

With Wix Headless, you can add reCAPTCHA protection to your member registration and login forms to help prevent fraud and abuse. reCAPTCHA verifies that interactions are coming from real visitors rather than automated bots.

This article explains how to implement reCAPTCHA with member authentication using the REST API.

You'll learn how to:

• Implement reCAPTCHA using a 3rd party.
• Use reCAPTCHA tokens during register and login.

Before you begin

• Enable reCAPTCHA

Step 1 | Implement reCAPTCHA using a 3rd party

Use a 3rd-party library like Google reCAPTCHA to implement the reCAPTCHA or choose to implement it yourself using Google's APIs.

You can choose to always require reCAPTCHA verification or only require it for suspected bots.

• To always require reCAPTCHA verification, use a visible site key when loading the reCAPTCHA script.
• To only require reCAPTCHA verification for suspected bots, use an invisible site key when loading the reCAPTCHA script.

For example, implement a visible reCAPTCHA widget with Google reCAPTCHA:

Step 2 | Use reCAPTCHA tokens to register or login

Call the Register V2 or Login V2 endpoint with the appropriate reCAPTCHA token returned to your reCAPTCHA implementation.

When always requiring reCAPTCHA verification, send the token using the captcha_tokens.Recaptcha property.

When only requiring reCAPTCHA verification for suspected bots, send the token using the captcha_tokens.InvisibleRecaptcha property.