reCAPTCHA Bot Protection

Bots can disrupt your checkout process by submitting fake orders, leading to operational issues and fraud risks. To prevent this, Limio supports Google reCAPTCHA, a widely used security measure that helps ensure only real users can proceed.

This guide will walk you through enabling, configuring, and customizing reCAPTCHA in your Limio checkout to balance security and user experience.

For more on strengthening checkout security, see Limio Security Best Practices.

Enabling reCAPTCHA in Limio

Follow these steps to enable reCAPTCHA in your checkout flow:

1. Generate reCAPTCHA credentials:

   • Go to Google reCAPTCHA Admin Console.
   • Register your site and select reCAPTCHA v3.
   • Copy the site key and secret key provided.
2. Configure reCAPTCHA in Limio:

   • Navigate to settings > site security in the Limio Admin Panel.
   • Locate the reCAPTCHA configuration section.
   • Enter your site key and secret key.
   • Choose the reCAPTCHA version you registered.
   • Tick enabled.
   • Set a deny threshold above 0.
   • Click save to apply the changes.

Keys alone do not give protection. If enabled is not ticked, Limio does not check the reCAPTCHA token of an order, even with both keys saved and a threshold set. The shop still asks Google for a token, so the checkout looks correct and the Google dashboard shows traffic, but a bot order passes.

A deny threshold of 0, or an empty threshold, makes Limio ignore the score that Google gives. Limio still refuses a request that fails the check, but it accepts a request that Google scored as probable automation. Set a threshold above 0.

After an incident, check both values before anything else.

3. Rebuild Pages in Limio: * Navigate to **catalog > operations > mass build and publish** in the Limio Admin Panel. * In the Label dropdown select 'Show All' * Click 'Mass-Build' * Once the build has completed * Click 'Mass-Publish' 4. Test the Integration: * Perform a test checkout to verify that reCAPTCHA appears as expected. * Check your Google reCAPTCHA dashboard for validation logs.

📷 Screenshot: Site security settings

Customizing reCAPTCHA behaviour

Limio provides options to customize reCAPTCHA settings to balance security and user experience:

• Threshold settings (for reCAPTCHA v3): Adjust the sensitivity level to filter bot activity.
• Page placement: Configure whether reCAPTCHA appears on the cart page, checkout page, or both.
• User experience settings: Enable options like "Remember me" to reduce friction for returning customers.

Troubleshooting

If reCAPTCHA is not functioning correctly:

• Ensure reCAPTCHA is on: In settings > site security, confirm that enabled is ticked and the deny threshold is above 0. Keys on their own give no protection.
• Ensure correct API keys: Double-check your Site Key and Secret Key.
• Browser console errors: Check for JavaScript errors in the browser developer console.
• Google Dashboard: Review your Google reCAPTCHA admin panel for blocked requests or misconfigurations.
• Contact Support: If the issue persists, reach out to Limio Support for assistance.