reCAPTCHA from Google is a free service (with certain usage limits) designed to protect your site from spam and bots. It can be used in Blockscout to prevent bot activity related to CSV downloads and account validation. reCAPTCHA is turned on by default, but can be disabled by settingDocumentation Index
Fetch the complete documentation index at: https://docs.blockscout.com/llms.txt
Use this file to discover all available pages before exploring further.
RE_CAPTCHA_DISABLED to true.
Obtain your keys
1) To use reCAPTCHA you will need a SITE KEY and SECRET KEY- Go to https://www.google.com/recaptcha/admin/create, login to Google with an existing account, and fill in the following info: a. Label: Private label to identify the instance in your reCAPTCHA admin dashboard. b. reCAPTCHA type: Select Challenge (v2) and Invisible reCAPTCHA badge c. Domains: Enter your primary Blockscout domain, all associated subdomains will be covered. You can enter multiple domains, and also localhost for testing if needed. d. Submit

| Backend ENV Variable | Google reCAPTCHA key |
|---|---|
RE_CAPTCHA_SECRET_KEY | SECRET KEY |
| Frontend ENV Variable | Google reCAPTCHA key |
|---|---|
NEXT_PUBLIC_RE_CAPTCHA_APP_SITE_KEY | SITE KEY |

Once setup, you can view and update your reCAPTCHA settings on the Google admin dashboard at https://www.google.com/recaptcha/admin
Additional reCAPTCHA ENV info
- Backend reCAPTCHA ENVs are located in the Backend ENVs: Common page in the CSV exports section.
- Frontend reCAPTCHA ENVs are located on the Frontend ENVs: Common -> ENVs page in the External Services section.
- Disable reCAPTCHA by setting
RE_CAPTCHA_DISABLEDto true - Disable checking reCAPTCHA domain names by setting
RE_CAPTCHA_CHECK_HOSTNAMEto false. This will bypass checking the hostname info added during reCAPTCHA setup in Google. ****More info on domains.