0

Our PROD environment is currently using ReCAPTCHA Enterprise Key + Legacy secret key, which still using "site verify" to verifying the score of the user.

We are planning on migrate to Assessment feature with the additional features (e.g 11 score levels).

So I would like to know that if Google have enabled this feature, will:

  1. it affect the “https://www.google.com/recaptcha/api/siteverify” response?
  2. the score in “https://www.google.com/recaptcha/api/siteverify” also reflect 11 levels?
  3. the existing V3 secret key / site key still valid after the feature enabled?

Many Thanks!

Improve this question

1 Answer 1

Reset to default
0

Siteverify is a reCaptcha v3 endpoint which is used for validating whether the response sent by the token from reCaptcha widget is valid or not and can only give a score value ranging from 0 to 1(while 0 seemingly response generated by bot and 1 represents a valid human response). Assessment is an enhancement made to siteverify in the reCaptcha enterprise edition which can be used for more sophisticated behavioral analysis by leveraging various score levels(up to 11). So, even if you have upgraded your reCaptcha to enterprise edition if you are using siteverify endpoint you can only use score levels between 0 to 1.[1][2]

Migrating from reCaptcha(v2 or v3) to reCaptcha enterprise:

As mentioned in this official documentation on migrating non-Enterprise version of reCaptcha to reCaptcha Enterprise

Migrating from a non-Enterprise version of reCAPTCHA to reCAPTCHA Enterprise involves choosing an active site key from the reCAPTCHA Admin console and migrating the site key. You can migrate one or more active site keys. However, you can migrate only one site key at a time.

Hence, you can utilize the same keys which you have been using for non-Enterprise reCaptcha in Enterprise version of reCaptcha.

Will migrating to reCaptcha Enterprise affect the site verify endpoint’s response?

Migrating to reCaptcha Enterprise won’t affect any features that are available in non-Enterprise reCaptcha like siteverify. It only checks whether the response is valid or not and further investigates the cause of an invalid response.

References:

[1] https://developers.google.com/recaptcha/docs/v3#site_verify_response
[2] https://cloud.google.com/recaptcha-enterprise/docs/interpret-assessment-website#interpret_assessment

Improve this answer
3
  • Thanks, would the score in V3 site response will also have 11 levels, or will be the same as existing one?
    – Jamie Phan
    Commented Dec 13, 2023 at 2:57
  • @JamiePhan if you want to use 11 score levels it is only possible with the assessment feature of reCaptcha Enterprise. The siteverify response in reCaptcha v3 contains only score levels between 0 to 1.
    – Kranthiveer Dontineni
    Commented Dec 13, 2023 at 4:40
  • @JamiePhan have you got time to go through my response, kindly revert back if you still have some queries.
    – Kranthiveer Dontineni
    Commented Dec 19, 2023 at 6:57

Not the answer you're looking for? Browse other questions tagged or ask your own question.