Magento 2 reCAPTCHA v3: Form Protection with Cookie Consent
SKU: GOOGLERECAPTCHA1
- reCAPTCHA v3 for login, registration, password reset, contact and review
- Loads only after consent through the CookieConsent hook
- Score threshold per form with server-side verification
- Log and test mode for clean fine-tuning
Einmaliger Kauf · inkl. 12 Monate Updates · zzgl. MwSt.
Magento 2 reCAPTCHA v3: stop spam without annoying customers
The Magento 2 reCAPTCHA v3 module protects login, registration, password reset, contact form, review and newsletter against bots. Unlike visible image puzzles, v3 works in the background with a score. What matters for shops in Europe: the Google script only loads after consent through Mironsoft's CookieConsent. The extension is built for Hyvä and is set up personally in your shop by Mironsoft.
Score instead of puzzles
reCAPTCHA v3 rates visitors in the background, real customers see no image puzzles.
Loads after consent
The Google script starts only when consent exists in the CookieConsent.
Threshold per form
Login strict, newsletter looser: its own minimum score for every form.
Server-side verification
The token is verified on your server, not merely claimed in the browser.
Log and test mode
Scores are recorded; in test mode nothing is blocked and you tune in peace.
Failure cases handled
Timeouts, missing consent or low scores trigger defined reactions.
Magento 2 reCAPTCHA for contact form, registration and reviews
In the admin you choose which forms are protected: customer login, registration, forgot password, contact form, product review and newsletter signup. For each form you set a score threshold. Google returns a value between 0 and 1; the lower it is, the more likely it is a bot. Login may use a higher threshold than the newsletter because more damage is at stake there.
In test mode the check runs along without blocking. The log shows which scores real customers reach. Only then do you switch live and avoid turning away paying customers by mistake.
- Forms individually switchable
- Threshold from 0 to 1 per form
- Test mode with score log
Magento 2 reCAPTCHA and cookie consent: load with data protection in mind
The Google script connects the browser to an external service. That is why the module loads it only after the visitor has agreed in Mironsoft's CookieConsent. Without consent the form shows a notice with a button to open the settings; alternatively a simple fallback check can be chosen, or the form stays locked until consent is given.
For the Hyvä CSP theme the module adds the required Google domains to the content security policy. Your privacy policy should name the service and the data transfer; the legal wording rests with your adviser.
- Hook to Mironsoft CookieConsent
- Behaviour without consent selectable
- CSP whitelist for the Hyvä CSP theme
Magento 2 reCAPTCHA: server-side verification, timeouts and clear messages
The browser creates a token and the Magento server asks Google for the score. If the service is down or the request times out, you decide whether the form stays open (fail-open, lower security) or closes (fail-closed). For a low score your own message appears per store view.
The secret key is stored encrypted in the configuration. The storefront forms are protected; the backend admin login is not part of it.
- Fail-open or fail-closed selectable
- Message texts per store view
- Secret key stored encrypted
Use cases for Magento 2 reCAPTCHA in your shop
Wherever visitors submit data, Magento 2 reCAPTCHA pays off as quiet protection.
Contact form spam
Bots send advertising and links. The score filters them before a mail reaches the inbox.
Fake registrations
Mass customer accounts distort statistics and newsletter lists and are turned away early.
Login attacks
Credential stuffing hits login and password reset; strict thresholds slow automated attempts.
Review spam
Product reviews with foreign links disappear while genuine reviews pass without friction.
Magento 2 reCAPTCHA: without and with the module
With no protection, or a blanket standard solution, consent and fine-tuning fall by the wayside.
| Topic | Without the module | With Google reCAPTCHA |
|---|---|---|
| Contact form spam | Sorted out by hand daily | Bots rejected by score |
| Consent | Script loads immediately | Loads only after consent |
| Strictness | One setting for everything | Threshold per form |
| Verification | Browser only | Verified server-side |
| Fine-tuning | Guessing | Test mode and score log |
| Google outage | Form blocked unclearly | Fail-open or fail-closed by choice |
How we set up Magento 2 reCAPTCHA in your shop
After the purchase, setup runs in five steps.
Create keys
We support you with site key and secret key in your Google account.
Install the module
Installation of the extension and a check of your Hyvä theme's CSP settings.
Connect CookieConsent
We link Magento 2 reCAPTCHA to consent and define behaviour without consent.
Forms and thresholds
We decide with you which forms Magento 2 reCAPTCHA protects, at first in test mode.
Review and go live
After a few days we examine the log and set the thresholds accordingly.
Scope and data protection for Magento 2 reCAPTCHA
The module stops spam at the moment of submission. Mironsoft's Stop Spam Mails module, by contrast, filters content that has already arrived and complements the protection. The two can be combined; if you prefer to work without an external service, use the filtering alone.
reCAPTCHA transfers data to Google. That is why the module loads the service only after consent and adds the required domains to the content security policy. Mention the service in your privacy policy and cookie overview. The legal assessment, including third-country transfer, rests with your legal adviser; the module provides the technical basis, consent before script start.
In daily use the combination of score and log pays off: instead of bothering visitors with puzzles you adjust strictness from real data. If the log shows legitimate customers repeatedly landing just below the threshold, lower it; if bots pile up, raise it. All settings apply per store view, so new markets can get their own behaviour.
No download — personal setup instead
Magento 2 reCAPTCHA is not listed here as a ready-made download for self-installation. The purchase is a service commission: we install the module in your shop and set up keys, consent connection and form thresholds with you.
Frequently asked questions
Everything important about score, consent, outages, data protection and the purchase.
How can I use reCAPTCHA v3 for the contact form and registration in Magento 2?
How can I use reCAPTCHA with data protection in mind?
What does the score threshold mean in Magento 2 reCAPTCHA?
Which forms can be protected?
What if the Google service is unreachable?
Can I test first without blocking real customers?
Is the backend admin login protected?
Does it work with Hyvä and the CSP theme?
Does this replace the mail spam filter?
Can I download and install the module myself?
Recently Viewed Products
Magento 2 reCAPTCHA – Mironsoft Google reCAPTCHA