This document lists common reCAPTCHA integration issues that developers might encounter when using reCAPTCHA in their environment.
Invalid site key or invalid key type
If you see the Invalid site key or Invalid key type error, check the
following:
- Verify that the key version in the Google Cloud console matches the version
configured in your website or third-party CMS plugin (for example,
Website • scoreforv3, orWebsite • checkboxforv2 Checkbox). To check your key version, see View your key version in the Google Cloud console. - If your reCAPTCHA site key is deleted or no longer valid, create a new key and update your CMS plugin or install the key on your web pages.
Keys migration failure
Site keys can fail to migrate in one of the following scenarios:
You've exceeded the number of projects that you or your organization can create.
To resolve this, you can reuse an existing project, request an increase in project creation quota, or wait for the automated migration to complete.
Your workspace organization has restricted creating of new Google Cloud projects.
To turn on the Google Cloud service in the Google Admin console, contact your administrator. For more information, see Turn Google Cloud on or off for users.
SecurityError: blocked a frame with origin "https://www.google.com" from accessing a frame with origin "<your domain>"
This typically occurs if the reCAPTCHA widget HTML element is programmatically removed sometime after the end user clicks on the checkbox. We recommend using the grecaptcha.enterprise.reset() JavaScript function to reset the reCAPTCHA widget.
Localhost is not in the list of supported domains
Localhost domains are not supported by default. If you want to continue supporting them for development, you can add them to the list of supported domains for your site key. Go to the Google Cloud console to update your list of supported domains. We advise that you use separate keys for development and production, and to only allow localhost on your development site key.
reCAPTCHA returned BROWSER_ERROR when creating an assessment
BROWSER_ERROR tokens occur when the reCAPTCHA script cannot perform
an execute operation. In most cases, this is due to a client-side network
failure or timeout. You must retry execute() using the JavaScript.