> ## Documentation Index > Fetch the complete documentation index at: https://formcarry.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Protect Your Forms with Google reCAPTCHA v2 and v3 > Add Google reCAPTCHA v2 checkbox or v3 to your formcarry forms to block spam bots and protect submissions from automated abuse with server-side validation. Google reCAPTCHA adds an extra layer of bot protection to your forms. After you paste your secret key into your form settings, formcarry validates every submission against Google's reCAPTCHA API before accepting it. formcarry supports **reCAPTCHA v2 Checkbox** and **reCAPTCHA v3**. reCAPTCHA v2 Invisible is not supported. ## Get Your reCAPTCHA Keys Go to the [Google reCAPTCHA Admin Console](https://www.google.com/recaptcha/admin) and sign in with your Google account. Click **+** to register a new site. Fill in your site label, select your reCAPTCHA type (v2 Checkbox or v3), and add your domains. Include `localhost` if you need to test locally. After clicking **Submit**, Google generates two keys: * **Site Key** — used in your HTML markup * **Secret Key** — pasted into formcarry to enable server-side validation ## Using reCAPTCHA v2 (Checkbox) Paste the following script tag inside your ``: ```html theme={null} ``` Place the `g-recaptcha` div inside your form, replacing `YOUR_SITE_KEY` with the Site Key from the Admin Console: ```html theme={null} ``` Return to the [Google reCAPTCHA Admin Console](https://www.google.com/recaptcha/admin) and copy the **Secret Key** for your site. In the formcarry dashboard, open your form's **Settings**, enable the **Google reCAPTCHA** toggle, paste your Secret Key into the field, and click **Save**. ## Using reCAPTCHA v3 Add the v3 script to your ``, passing your Site Key as the `render` parameter: ```html theme={null} ``` Add a hidden input that will hold the reCAPTCHA token formcarry reads on submission: ```html theme={null} ``` Use JavaScript to request a token from Google and write it into the hidden input before the form is submitted: ```javascript theme={null} grecaptcha.ready(function() { grecaptcha.execute('YOUR_SITE_KEY', { action: 'homepage' }) .then(function(token) { document.getElementById('captchaResponse').value = token; }); }); ``` Copy your **Secret Key** from the [Google reCAPTCHA Admin Console](https://www.google.com/recaptcha/admin), open your form's **Settings** in formcarry, enable the **Google reCAPTCHA** toggle, paste the Secret Key, and click **Save**. Add `localhost` to your reCAPTCHA domain list when testing locally. Without it, the widget will throw a domain mismatch error and your submissions won't pass validation. ## Related topics - [React](/docs/frameworks/react.md) - [JavaScript](/docs/frameworks/javascript.md) - [Next.js](/docs/frameworks/nextjs.md) - [jQuery](/docs/frameworks/jquery.md) - [formcarry.js](/docs/frameworks/formcarry-js.md)