How to Add Google reCAPTCHA Security to Your Forms: Complete Guide

How to Add Google reCAPTCHA Security to Your Forms: Complete Guide

By Michael Turner

January 1, 2025 at 06:14 PM

Google reCAPTCHA is an invisible security feature that prevents spam submissions on forms. Here's how to implement it across different form types:

Default Implementation

  • Automatically enabled for form blocks, newsletter blocks, and product waitlists
  • Uses reCAPTCHA v3 (invisible, no user interaction required)
  • Cover pages use reCAPTCHA v2 (requires checkbox verification)

Form Blocks

  1. Click Edit on the page
  2. Click the pencil icon in the form block
  3. Navigate to Storage tab
  4. Click Google reCAPTCHA
  5. Enable the Google reCAPTCHA option

Newsletter Blocks

  1. Click Edit on the page
  2. Click the pencil icon in the newsletter block
  3. Go to Storage tab
  4. Click Squarespace and Connect if needed
  5. Enable Google reCAPTCHA option

Promotional Pop-ups

  1. Open Promotional pop-ups panel
  2. Click Action
  3. Select Subscribe to a newsletter
  4. Click Verify and select Activate reCAPTCHA

Cover Page Forms (Version 7.0)

  1. Open Developer Tools panel
  2. Click External API keys
  3. Navigate to Google reCAPTCHA
  4. Get API keys from Google:
    • Create label for site identification
    • Select reCAPTCHA V2
    • Add domains (format: yoursite.squarespace.com)
    • Accept terms of service
    • Copy Site Key and Secret Key

Squarespace reCAPTCHA settings

Squarespace reCAPTCHA settings

Squarespace custom domain configuration

Squarespace custom domain configuration

Google reCAPTCHA secret keys

Google reCAPTCHA secret keys

Troubleshooting Common Issues:

  • Invalid domain error: Add all domains including integrated domain
  • Invalid key type: Use reCAPTCHA V2 for cover pages
  • Form submission errors: Check for extra text in Secret Key field
  • iOS compatibility: reCAPTCHA checkbox may scroll to page bottom (known limitation)

Updating Domain Settings:

  1. Access Developer Tools panel
  2. Click External API keys
  3. Navigate to Google reCAPTCHA
  4. Update domains list in Google Admin Console
  5. Allow up to 30 minutes for changes to take effect

Related Articles

Previous Articles