Thoughts on Google reCAPTCHA V3

[DrQuincy]

I tend to use things like time delay, force JS, honeypot for spam protection and then only add other measures once they don't seem to work on a site.

I do have a couple of sites getting a lot of spam and I am trying out Google reCAPTCHA v3 since it's free for my degree of usage and seems to be done without the user knowing about it. I have used V2 before but I hate it as a user experience; some of the tests have been ridiculously long. 

I just wondered what your thoughts were on it. My main concern is: do things like uBlock and Firefox in strict mode work with it? I have uBlock running and use Firefox in Ehanced mode and it seems okay. What's a suitable fallback? And are false positives common? I am going to use PW's logging system, at least initially, to log those that doesn't make it through.

Curious to hear people's opinions and if there are any gotcahs I might've missed.

Thanks. 🙂 

[AndZyk]

I like Google reCAPTCHA but at the end of the year it won't be free anymore. So its time to look for an alternative. But right now I have no alternative to recommend. ☺️

[DrQuincy]

Thanks, will there be no free allowance at all? What about the free credit you get per month with Cloud Console?

I don't believe it, I just pushed this live for a client and right away they got a spam submission that scored 0.9/1! Judging by the contents of the form it can't possibly be a human. How on earth is it scoring so highly? Will Google “learn” from this once a few come through?

[AndZyk]

Ok, so it seems that you have 10 000 free requests per month, so maybe you can still use it. 😉

Are you using your own reCAPTCHA script or with FormBuilder? If it is your own script I think you could set your a treeshold score, for example 0.6 or so.

Regards, Andreas

[DrQuincy]

Yeah, I thought so.

I'm using my own by the spam emails are still getting 0.9 (same as me!).

I don't get these spam emails since there's nothing promotional in them whatsoever and yet they're making it passed everything.