Protect Your Forms with Google reCAPTCHA v2 and v3

Google reCAPTCHA adds an extra layer of bot protection to your forms. After you paste your secret key into your form settings, formcarry validates every submission against Google’s reCAPTCHA API before accepting it.

formcarry supports reCAPTCHA v2 Checkbox and reCAPTCHA v3. reCAPTCHA v2 Invisible is not supported.

Get Your reCAPTCHA Keys

Open the Google reCAPTCHA Admin Console

Go to the Google reCAPTCHA Admin Console and sign in with your Google account.

Click + to register a new site. Fill in your site label, select your reCAPTCHA type (v2 Checkbox or v3), and add your domains. Include localhost if you need to test locally.

Copy your keys

After clicking Submit, Google generates two keys:

Site Key — used in your HTML markup
Secret Key — pasted into formcarry to enable server-side validation

Using reCAPTCHA v2 (Checkbox)

Add the reCAPTCHA script to your page

Paste the following script tag inside your <head>:

<script src="https://www.google.com/recaptcha/api.js"></script>

Add the reCAPTCHA widget to your form

Place the g-recaptcha div inside your form, replacing YOUR_SITE_KEY with the Site Key from the Admin Console:

<form action="https://formcarry.com/s/XXXX" method="POST" enctype="multipart/form-data">
  <!-- your other fields -->
  <div class="g-recaptcha" data-sitekey="YOUR_SITE_KEY"></div>
  <button type="submit">Submit</button>
</form>

Copy your Secret Key

Return to the Google reCAPTCHA Admin Console and copy the Secret Key for your site.

Enable reCAPTCHA in formcarry

In the formcarry dashboard, open your form’s Settings, enable the Google reCAPTCHA toggle, paste your Secret Key into the field, and click Save.

Using reCAPTCHA v3

Add the reCAPTCHA v3 script

Add the v3 script to your <head>, passing your Site Key as the render parameter:

<script src="https://www.google.com/recaptcha/api.js?render=YOUR_SITE_KEY"></script>

Add a hidden input to your form

Add a hidden input that will hold the reCAPTCHA token formcarry reads on submission:

<input type="hidden" id="captchaResponse" name="g-recaptcha-response" />

Execute reCAPTCHA and populate the hidden input

Use JavaScript to request a token from Google and write it into the hidden input before the form is submitted:

grecaptcha.ready(function() {
  grecaptcha.execute('YOUR_SITE_KEY', { action: 'homepage' })
    .then(function(token) {
      document.getElementById('captchaResponse').value = token;
    });
});

Enable reCAPTCHA in formcarry

Copy your Secret Key from the Google reCAPTCHA Admin Console, open your form’s Settings in formcarry, enable the Google reCAPTCHA toggle, paste the Secret Key, and click Save.

Add localhost to your reCAPTCHA domain list when testing locally. Without it, the widget will throw a domain mismatch error and your submissions won’t pass validation.

Getting Started

Features

Email Configuration

Integrations

Frameworks

Site builders

Build with AI

Connect over MCP

Protect Your Forms with Google reCAPTCHA v2 and v3

Get Your reCAPTCHA Keys

Using reCAPTCHA v2 (Checkbox)

Using reCAPTCHA v3

​Get Your reCAPTCHA Keys

​Using reCAPTCHA v2 (Checkbox)

​Using reCAPTCHA v3

Get Your reCAPTCHA Keys

Using reCAPTCHA v2 (Checkbox)

Using reCAPTCHA v3