How to Set Up Google reCAPTCHA v2
What you will achieve in this guide
Follow this step-by-step documentation to configure custom B2B registration forms, approval workflows, and customer tagging.
Configure your own Google reCAPTCHA v2 checkbox keys to protect Shopify registration forms in Rivio.
Before you begin
Choose a test form and review the current protection settings before changing them. Use dummy submissions to check allowed and blocked cases. Google reCAPTCHA keys are configured separately from enabling reCAPTCHA on each form.
Keys belong to the storefront challenge
This app supports Google reCAPTCHA v2 checkbox. The site key identifies the challenge on the storefront, and the secret key is used for verification. Register the domain where the form will actually run.
Saving shop-wide keys is only the first part: enable reCAPTCHA on each intended form. Admin preview is not a substitute for testing the real storefront domain. Other challenge providers and reCAPTCHA v3 are not supported by this documented setup.
Set up this workflow
Open Google’s reCAPTCHA administration using the account that will manage your keys.
Register the storefront domains where the form will run and choose reCAPTCHA v2 — I’m not a robot checkbox.
Copy the site key and secret key generated by Google.
Open app Settings and enter them in the reCAPTCHA v2 key fields.
Save, then enable reCAPTCHA on the intended form in its Advanced settings.
Test a real storefront submission and confirm valid applicants can complete the challenge.
Example
Create reCAPTCHA v2 checkbox keys for the demo storefront domain, save them in app settings, and then enable protection on the demo form.
Expected result
The storefront challenge can be completed on the configured domain and a valid application submits.
Limits and important behavior
- The app supports v2 checkbox, not v3, hCaptcha, or Cloudflare Turnstile.
- Your own Google keys are required.
- Store the secret key securely; do not publish it in theme code or article content.
Troubleshooting and verification
If reCAPTCHA reports a key or domain error, compare the key type and authorized storefront domain in Google’s configuration. Use v2 checkbox keys, save them in app Settings, and enable the protection on the intended form before testing.
Screenshots to add
Screenshot placeholder: Capture the relevant app screen for “How to Set Up Google reCAPTCHA v2” after completing the setup. Show the controls used to open Google’s reCAPTCHA administration using the account that will manage your keys. Add a second screenshot showing the result of this check: Test a real storefront submission and confirm valid applicants can complete the challenge. Use dummy applicant details and mask any secrets.
Related guides
Was this article helpful?
Your feedback helps us continuously improve our setup guides and documentation.
Thank you for your feedback! Our documentation team reviews all suggestions.