Skip to main content
The Google reCAPTCHA integration provides absolute enterprise-grade spam protection for your Flex Forms. Flex Forms supports both reCAPTCHA v2 (the familiar “I’m not a robot” checkbox) and reCAPTCHA v3 (invisible, score-based protection).

​
Enterprise Business Use Cases

Frictionless Spam Prevention

Eliminate automated bot submissions from polluting your CRM. By using v3, you maintain a 100% frictionless user experience, drastically improving conversion rates compared to visible CAPTCHAs.

​
Ultra-Detailed, Step-by-Step Setup Guide

Connecting Flex Forms to reCAPTCHA requires generating a Site Key and a Secret Key inside the Google Admin console. Follow these exact instructions.
1

Step 1: Access the reCAPTCHA Admin Console

Open your web browser and navigate directly to this exact URL: https://www.google.com/recaptcha/admin/create. Log in with your company’s Google Workspace administrator account.
2

Step 2: Register a New Site

You will see a configuration form titled “Register a new site”.
  • Label: Type exactly Flex Forms Website. (This helps you identify it later).
3

Step 3: Select reCAPTCHA Type

Under the “reCAPTCHA type” section, select either reCAPTCHA v3 (recommended for seamless UX) or reCAPTCHA v2 (“I’m not a robot” checkbox).
Crucial Configuration: You MUST select the exact same version in Flex Forms Settings as you do here in the Google Admin Console. Mismatched versions will cause validation to fail.
4

Step 4: Add Your Domains

Under the “Domains” section, type the exact domain where your forms are hosted (e.g., yourcompany.com) and press Enter. Note: Do not include https:// or trailing slashes. Just the root domain.
5

Step 5: Accept Terms and Submit

Check the box to accept the reCAPTCHA Terms of Service. Click the blue Submit button at the bottom of the page.
6

Step 6: Copy the Keys

Google will instantly generate two distinct cryptographic keys: a Site Key and a Secret Key.Leave this window open, as you will need to copy both of these strings exactly as they appear.
7

Step 7: Inject Credentials into Flex Forms

Switch to your Flex Forms administrative dashboard in a new tab.
  1. Open Integrations (Flex Forms left rail) → Google reCAPTCHA.
  2. Switch back to Google, highlight the Site Key (the top one), and copy it.
  3. Paste it into the Site Key input field in Flex Forms.
  4. Switch back to Google, highlight the Secret Key (the bottom one), and copy it.
  5. Paste it into the Secret Key input field in Flex Forms.
8

Step 8: Define the Threshold and Save

In Flex Forms, you will see a setting for Risk Score Threshold. Google returns a score between 0.0 (likely a bot) and 1.0 (likely a good interaction).Set the threshold to 0.5 as a safe default. (Any submission scoring below this number will be blocked). Click the Save Settings button to finalize the secure connection.

​
Configuration & Masterclass Usage

Once the keys are saved, reCAPTCHA is available globally for forms. Enable CAPTCHA on a specific form under Form Settings → Access → CAPTCHA. Choose Google reCAPTCHA when both reCAPTCHA and Turnstile are connected — only one CAPTCHA provider can be active per form. Flex Forms injects the widget on the last step of that form (no canvas block required).

​
The Validation Architecture

How reCAPTCHA v3 Works Under the Hood
1. A user interacts with your form.
2. Google analyzes their mouse movements and browser history.
3. The user clicks Submit.
4. Flex Forms intercepts the submission and injects a cryptographic 'g-recaptcha-response' token into the payload.
5. The Flex Forms server securely pings the Google API.
6. Google returns a score (e.g., 0.9). If it passes your Threshold (e.g., 0.5), the submission proceeds.

​
Troubleshooting & Enterprise FAQs

The Problem: The form submission fails with a validation error related to CAPTCHA.The Solution: You likely have a mismatch between your Google Console configuration and Flex Forms. If you generated v2 keys in Google, you MUST select v2 in the Flex Forms Settings dropdown. If you generated v3 keys, you MUST select v3.
The Problem: Legitimate customers are complaining that they cannot submit the form.The Solution: Your Risk Score Threshold is set too high. If you set it to 0.9, you are demanding absolute perfection from Google’s algorithm, which will frequently block real users on mobile devices or VPNs. Lower your threshold in the Flex Forms settings to 0.3 or 0.5 to allow more leniency while still blocking massive botnets.

​
Configuration Reference

The following advanced settings are available in the Flex Forms UI for this integration. Use this reference to understand exactly how each field impacts the API payload.

​
Global Settings

Located in Integrations in the Flex Forms left rail.
​
select
required
Version Use v2 for the visible checkbox, or v3 for invisible score-based protection.Options:
  • v2: v2 checkbox
  • v3: v3 score
​
text
required
Site key
​
password
required
Secret key
​
text
v3 score threshold Only for v3. Tokens scoring below this value are rejected (0.0–1.0, default 0.5).

​
Form-Level Settings

Located in Form Settings → Access → CAPTCHA for a specific form.
​
select
CAPTCHA provider Choose recaptcha for this form, or leave CAPTCHA off. If Turnstile is also connected, pick exactly one provider — never both.
Last modified on September 7, 2026