Important changes to Google reCAPTCHA
What you need to know
Google reCAPTCHA is a security solution that protects websites from automated attacks and bot traffic. It uses artificial intelligence and machine learning to tell real users apart from malicious automated scripts.
By the end of 2025, all reCAPTCHA keys must be migrated to a Google Cloud Project. This gives Google unified user management and consistent pricing, and gives you access to advanced security features that improve protection against abuse.
What is Google reCAPTCHA and why does it matter?
Google reCAPTCHA is a popular security solution used by millions of websites to stop bots and automated attacks. It comes in several versions:
- reCAPTCHA v2 (I’m not a robot) – the user confirms they’re human by ticking a checkbox.
- reCAPTCHA v3 – runs in the background without user interaction and scores the risk of each action.
- reCAPTCHA Enterprise – an advanced business solution with improved protection and custom settings.
With growing cyber threats, Google reCAPTCHA is one of the key security elements that protect personal data, prevent fake sign-ups and improve website security.
What do you need to do?
Google will carry out the migration gradually throughout 2025 and will notify you when it’s your keys’ turn. Google will then automatically create a Google Cloud project and link your reCAPTCHA keys.
If you want to do it yourself and choose the right Google Cloud project, follow the instructions for manually migrating reCAPTCHA Classic. This gives you more control over the integration and security settings.
After a successful migration, you’ll have access to:
- Advanced dashboards for detailed analysis of reported suspicious activity,
- Traffic monitoring and security reports for a clearer view of suspicious activity,
- Logs and audit trails for identifying potential security risks,
- Advanced access control for restricting access by geolocation and user permissions.
Will you need to change the code on your websites?
No, your current reCAPTCHA integration will keep working. You can keep using the SiteVerify API, but Google recommends moving to the CreateAssessment API, which offers improved features and more accurate bot detection. This updated solution is more flexible and protects better against advanced attacks.
reCAPTCHA pricing after migration
With Google Cloud Projects, Google is moving to a new, more flexible and scalable pricing structure:
- reCAPTCHA Enterprise: about USD 1 per 1,000 assessments,
- reCAPTCHA v3 and v2 Invisible: USD 0.30 per 1,000 assessments,
- reCAPTCHA v2 (I’m not a robot): up to 1,000,000 assessments a month free, then USD 0.10 per 1,000 assessments.
Google Cloud users will get a certain number of assessments free, depending on the service tier, for a good balance between security and cost.
The free option for Google reCAPTCHA API protection
After migrating to a Google Cloud Project, the following pricing applies:
- reCAPTCHA v2 (I’m not a robot): up to 1,000,000 assessments a month free, then USD 0.10 per 1,000 assessments.
- reCAPTCHA v3 and v2 Invisible: free use is limited to a certain number of assessments, then USD 0.30 per 1,000 assessments.
- reCAPTCHA Enterprise: the advanced version, costing about USD 1 per 1,000 assessments, but with extra security features and business customisation.
If your usage stays under 1,000,000 assessments a month, you can keep using reCAPTCHA for free. Above that, the service is charged at the rates above.
Benefits of migrating to Google Cloud
Migrating to Google Cloud brings several key benefits:
- Better scaling – a flexible system that handles higher loads,
- Simpler management – all security tools in one place,
- Access to advanced security features – more resilience against advanced attacks,
- Detailed analytics and insights – you can track and analyse security incidents.
How to stay informed
For optimisation tips and product updates, follow these steps:
- Sign up for Google Cloud email notifications to hear about changes in good time.
- Follow updates on the reCAPTCHA blog, where Google regularly posts news and security optimisation tips.
- Check your settings in the Google Cloud console to make sure your website has the best protection.
For more information, see the official Google reCAPTCHA documentation or contact user support.
If you have more questions, contact Google Cloud support or qStom support.
Protect your OpenCart online store from unwanted sign-ups and spam! With Google reCAPTCHA integration, you can effectively block bots and malicious access attempts. Don’t let spam get in the way of your business – read our guide How to prevent spam on the OpenCart platform (in Slovenian) and strengthen your store’s security in just a few steps!