Recaptcha unprotected

  • Resolved jesseamber

    (@jesseamber)


    3 months ago

    I recently added recaptcha for PayPal payments.

    I am now receiving messages from Google saying there are issues. Specifically, in Google, my V3 recaptcha has a green checkmark for the Frontend setup, but a warning for the Backend setup, which says

    Unprotected

    Finish setting up your key: Request scores
    To fully protect your site or app, finish setting up your key. Your key is requesting tokens (executes), but isn’t requesting scores (assessments).

    If I click the “Set up” link to continue, it is giving me instructions to create a json file to verify the recaptcha token…? Do I really need to complete these steps? This is all over my head.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support Syde Jamie

    (@jamieong)

    3 months ago

    Hi @jesseamber ,

    Thank you for reaching out to us, we are here to help.

    No, you do not need to complete Google’s “Request scores” setup steps. The PayPal Payments plugin already performs score assessment by verifying the v3 token with Google’s siteverify endpoint, which returns a score that the plugin evaluates against your threshold. The warning in Google’s console is cosmetic for this implementation.

    If you can share your latest system status report, we can also verify this on your site that the reCAPTCHA has been setup correctly. You can do this by navigating to WooCommerce > Status > Get system report > Copy for support. You can either attach it directly or provide it via our secure PrivateBin.

    We look forward to your feedback.

    Best Regards,
    Jamie

    Thread Starter jesseamber

    (@jesseamber)

    3 months ago

    Thanks. System status report here: https://privatebin.syde.com/?37722105ec7dcc95#4BP7vzFM9EBkGLzC89sHYzEv2thhMwG2Kb6f5ZkVfaoJ

    Plugin Support Krystian Syde

    (@inpsydekrystian)

    3 months ago

    Hello @jesseamber

    You can safely ignore those Google Console instructions for now. Based on what we can see and the current behavior of the PayPal Payments reCAPTCHA integration, everything is working correctly on your end. I checked the checkout page and the reCAPTCHA token is being generated and loaded properly. That confirms the integration is functioning as expected.

    I’m more familiar with verification requests related to reCAPTCHA v2 those sometimes appear when a site hasn’t yet triggered a visible challenge to anyone yet, and Google wants initial verification. However, seeing something similar with v3 is unusual.

    At this point, I would not treat it as an issue. From the plugin perspective, everything is operating correctly.

    If you still have concerns, you may contact Google directly for clarification, but the integration is working as intended; it just redirects to PayPal as it should.

    Kind regards,
    Krystian

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.