Google reCAPTCHA v3 + v2 - Invisible Anti-Spam & Bot Protection

Bots are busy on your store right now

Fake customer accounts, contact-form spam, newsletter bombing, automated checkout attempts — every unprotected PrestaShop form is a target. Google reCAPTCHA v3 + v2 puts Google's bot-detection AI in front of all of them, without making your real customers click a single traffic light.

How it works

• 1. Get your free keys — create a reCAPTCHA site in Google's console (free) and copy the public and private keys.
• 2. Paste and toggle — enter the keys on the module's configure page and switch protection on. No template edits, no code.
• 3. Bots get blocked, humans never notice — v3 scores every submission invisibly; only the small reCAPTCHA badge shows, with Google's required Privacy Policy and Terms links included automatically.

Four forms, one shield

• Account creation — stop fake signups before they pollute your customer base.
• Contact form — end the daily spam flood in your customer service inbox.
• Checkout, including guest checkout — block automated carding and junk orders.
• Newsletter subscription — keep your mailing list clean and your sender reputation intact.

Invisible by default, strict when you want

• reCAPTCHA v3 scores every visitor from 0 to 1 — you choose the threshold (Google recommends 0.9) so you control the strictness.
• Prefer a visible challenge? Switch any form to the classic v2 checkbox instead.
• Optional extra layers: a strict name-format check (catches keyboard-mash names), numeric-only email detection, and spam-phrase filtering.
• A live counter on the configure page shows exactly how many suspicious submissions have been blocked so far.

Engineered so real customers never get stuck

A fresh reCAPTCHA token is fetched at the exact moment the form is submitted — not cached at page load — so slow typers are never rejected with a stale token (Google's v3 tokens expire after ~2 minutes). Tokens are strictly single-use on the server side, so a verified token can never be replayed by a bot. These are real engineering details, documented in the module's public changelog.

Compatibility

PrestaShop 1.5, 1.6, 1.7, 8 and 9. Works with any theme — the scripts attach to PrestaShop's native forms. Free Google reCAPTCHA account required.

Frequently asked questions

Will my customers have to solve puzzles?

No. With v3 the protection is completely invisible — only the small reCAPTCHA badge appears. Customers only see a challenge if you deliberately switch a form to v2 checkbox mode.

What if a real customer gets a low score?

You control the threshold from 0 to 1. Lower it for lenient filtering, raise it for strict protection, or use v2 checkbox mode where a human can always prove themselves.

Which forms are protected?

Account creation, the contact form, checkout (including guest checkout) and the newsletter subscription form — the four most attacked forms in any PrestaShop store.

Is the setup technical?

No. Create free keys in Google's reCAPTCHA console, paste them into the module, toggle on. About five minutes, no code.

Will it slow my store down?

No. The scripts load at the bottom of the page asynchronously and only on pages with protected forms.

Does it show how much it blocks?

Yes — the configure page keeps a running counter of blocked suspicious submissions, so you can see the module earning its keep.