Switching from reCAPTCHA to hCaptcha is easy. Below you can find a step-by-step guide to help with this upgrade.
You don't have to update your callbacks or tag attributes. hCaptcha is API-compatible with reCAPTCHA.
- Signup or login on the hCaptcha Dashboard
- Go to the Sites tab in the dashboard and create a new sitekey.
- Go to the Settings tab in the dashboard and copy your secret key.
Replace the script tag:<script src="https://www.google.com/recaptcha/api.js" async defer></script>
becomes<script src="https://js.hcaptcha.com/1/api.js" async defer></script>
Replace the parameter name:
Update secret key:
Use the secret key that you got in the first step.
Replace field used from the form:
Update siteverify URL
Invert score consumption (reCAPTCHA v3 or Enterprise to hCaptcha Enterprise only)
reCAPTCHA scores run from 0.0 (bot) to 1.0 (person). hCaptcha Enterprise scores are risk scores, and thus they run from 0.0 (no risk) to 1.0 (confirmed threat). See the hCaptcha Enterprise documentation on scores for more details. (Requires login to Enterprise account.) This means you should invert any score checks in your score consumption code.If (score < threshold) Then [mitigate]
becomesIf (score >= threshold) Then [mitigate]
We have a very long list of pre-built hCaptcha integrations with other platforms and frameworks. A few are linked below:
|Android||Use hCaptcha with Android Apps|
|PHP||Use hCaptcha with PHP Apps|