Protect Logins with Google reCAPTCHA

3 min read

Add an “I am not a robot” check to every login into your workspace, and a Captcha field to your forms.

Google reCAPTCHA adds an “I am not a robot” check to every login into your workspace: yours, your team’s, your remote members’ and your clients’. A stolen list of passwords can’t be tried against your accounts. The same keys also power a Captcha field for your forms.

Overview

reCAPTCHA has two halves, and neither works alone: your Google keys go in Integrations, and the switch that turns it on is in Settings. This guide walks through both.

Who Can Access

Agency Admin

Only people who can manage integrations and account security can set this up.

Step-by-Step Guide

  1. Get your keys from Google

    Go to google.com/recaptcha/admin and register a new site. Choose reCAPTCHA v2 with the “I’m not a robot” checkbox, and add the domain your team and clients sign in on. Google then shows a Site Key and a Secret Key. Both start with 6L.

  2. Add the keys in Integrations

    Go to Integrations and click Connect on the Google ReCAPTCHA card.

    Google reCAPTCHA card in Integrations

    Paste the Site Key and the Secret Key and click Save. The dialog shows Configured and the card shows Connected. Keep the Secret Key private.

    Configure Google reCAPTCHA dialog with the Site Key and Secret Key
  3. Switch it on for logins

    Go to Settings → Account Statuses. In Security & Signup, turn on Enable reCAPTCHA and click Save Security Settings. From now on every login page shows the “I’m not a robot” check.

    Security and Signup settings with the Enable reCAPTCHA switch
  4. Add it to a form (optional)

    In the form builder, add the Captcha field from the Advanced group. It is called “Spam Protection” by default and uses the same keys, so people have to tick “I’m not a robot” before they can send the form.

Tips & Best Practices

i

Sign out and sign in once after you switch it on. If the check does not load, the domain you sign in on is probably missing from your site’s domains in the reCAPTCHA admin console.

Frequently Asked Questions

I added the keys but the login has no check. Why?⌄
Keys alone do nothing. Turn on Enable reCAPTCHA under Settings → Account Statuses → Security & Signup and save.
Does it cover my clients’ portal login?⌄
Yes. It covers every login into the workspace: you, your team, your remote members and your clients.
Can I use it on forms without the login check?⌄
Yes. The Captcha field only needs the keys in Integrations.