reCAPTCHA is now called Google Cloud Fraud Defense. In 2026, Google renamed reCAPTCHA to Google Cloud Fraud Defense. It works the same way. If you've already set it up, your keys keep working and you don't need to change anything. In Google Cloud you'll now find it under Fraud Defense, but in your Rocketspark Dashboard the setting is still called reCAPTCHA.
Getting spam form submissions or fake orders? reCAPTCHA is a Google tool that helps stop bots (automated programs) from filling in your forms and shop checkout. It runs quietly in the background, so your real customers can keep using your site as normal. This guide shows you how to set it up in about 10 minutes.
Having trouble? Jump to troubleshooting
Set up spam protection on your forms and checkout
Setup has three parts. First you create a key in Google Cloud. Then you copy two codes (a Site Key and a Secret Key) into your Rocketspark Dashboard. Finally you check it's working. It helps to keep Google Cloud and your Dashboard open in separate tabs.
[STORYLANE: Full setup from Google Cloud sign-in to pasting both keys into the Dashboard. Approx 12–14 steps. Sits here as a "watch me do it" option.]
Create your key in Google Cloud
- Go to Google Cloud console and sign in with your Google account.
- Type Fraud Defense in the search bar at the top, then select Fraud Defense.
- If you're asked to create a project, name it after your website. Add your organisation if you have one, then click Create.
- Click Create key.
-
Fill in the key details:
- Display name: your website name
- Application type: Web
- Domain list: click Add a domain and enter your domain name. Add both versions, for example yourdomain.com and www.yourdomain.com, plus any other domains connected to your website.
-
Key type: choose Score based (v3)
- Click Create key.
Add your keys to Rocketspark
- The key details page will open. If you click on Edit Key. There is a pop up with the informtion you can add in.
- In your Rocketspark Dashboard, go to My Account and find the reCAPTCHA section.
- Paste the ID into the Site Key box and paste the Secret Key into that option.
- Once done, the Rocketspark side with automatically save
Check it's working
- Open your live website and submit one of your forms. If it goes through as normal, reCAPTCHA is set up and working in the background. [VERIFY STEP: is there a better way to test, like a status in the Dashboard?]
Adjust how strict reCAPTCHA is
The strictness setting controls how carefully reCAPTCHA checks whether a visitor is a person or a bot.
Start with Default. You only need to change it if:
- Real customers are being blocked: lower the strictness.
- Spam is still getting through: raise the strictness.
reCAPTCHA branding on your forms
Google requires a short reCAPTCHA notice under each form on your website. You can't remove it, because it's part of Google's terms for using reCAPTCHA for free.
Why isn't my reCAPTCHA working?
If spam is still getting through, or your forms aren't sending, check these common causes:
- Your keys don't match. Compare the Site Key and Secret Key in your Dashboard (under My Account) with the ones in Google Cloud. Copy them again if you're not sure.
- Your key is the wrong type. Rocketspark needs a Score based (v3) key. You can't change the key type after you've created the key, so create a new one if yours is Challenge (v2).
- Your domain is missing from the domain list. Make sure you've added both yourdomain.com and www.yourdomain.com.
- You've changed your domain name. Add your new domain to the domain list in Google Cloud.
- You've gone over the free limit. The free plan covers 10,000 checks (called assessments) a month. You can see your usage in Google Cloud.
- There's a problem with your Google account. Sign in to Google Cloud and look for any warnings or error messages.
Tips and things to watch out for
- Choose Score based (v3) when you create your key. This is the most common setup mistake.
- Add every version of your domain, both with and without www.
- Copy the keys with the copy button rather than selecting the text by hand, so you don't pick up extra spaces.
Frequently asked questions
Will my customers have to click on pictures or solve a puzzle?
No. reCAPTCHA v3 works in the background and doesn't show your visitors a challenge. It gives each visit a score, and anything that looks like a bot is blocked.
Why can't I find reCAPTCHA in Google Cloud?
Google renamed it to Google Cloud Fraud Defense in 2026. Search for "Fraud Defense" in the Google Cloud console.
I set up reCAPTCHA before it was renamed. Do I need to do anything?
No. Your existing keys still work, and you don't need to change anything.
Does reCAPTCHA cost anything?
It's free for up to 10,000 checks a month, which covers most websites. If you go over this, Google may charge for the extra usage.
Does reCAPTCHA protect my shop checkout as well as my forms?
Yes. Once it's set up, reCAPTCHA protects both your Rocketspark forms and your shop checkout.
Can I remove the reCAPTCHA notice under my forms?
No. Google requires it as part of its terms.
Need more help?
If you're still stuck, flick us a message at support@rocketspark.com. We're happy to help.