Files and security

How to set up reCAPTCHA for registration forms

What you'll accomplish

Protect your client registration form from spam and bots by adding Google reCAPTCHA. This guide walks you through creating Google API keys, installing the required WordPress plugin, and enabling reCAPTCHA for your Client Portal registration form.

reCAPTCHA only protects the registration form where clients sign up for portals. It does not apply to the login form where existing clients access their portals.

Before you start

Make sure you have:

  • Client Portal version 4.14.2 or later

  • A registration page with the [client_portal_register] shortcode or Client Portal Register Form block

  • A default project and template configured in Client Portal settings (Settings > Client Portal > Register/Login)

  • Administrator access to your WordPress site

If you haven't set up self-registration yet, read Automatic portal creation: let clients register themselves first.

Step 1: Get your Google reCAPTCHA keys

Visit the Google reCAPTCHA Admin Console and sign in with your Google account.

  1. Click the + icon to register a new site

  2. Enter a label like "Client Portal Registration"

  3. Choose your reCAPTCHA type:

    • reCAPTCHA v3 – Invisible verification with score-based detection (recommended for seamless user experience)

    • reCAPTCHA v2 – "I'm not a robot" checkbox

    • Invisible reCAPTCHA – No interaction required unless suspicious activity detected

  4. Add your domain (e.g., yoursite.com) without http:// or https://

  5. Accept the terms and click Submit

  6. Copy the Site Key and Secret Key – you'll need these in the next step

Google Developers documentation page for reCAPTCHA v3, with sidebar navigation (Get Started, reCAPTCHA v3 selected), main content on placement, auto-binding, programmatic execution, score interpretation (0.0-1.0), actions, and verification. Includes code samples and admin console link.

Need more help creating keys? Check the official Google reCAPTCHA documentation.

Step 2: Install and configure the reCaptcha plugin

Client Portal works with the reCaptcha by BestWebSoft plugin to add reCAPTCHA to your registration form.

  1. In your WordPress dashboard, go to Plugins > Add New

  2. Search for "reCaptcha by BestWebSoft"

  3. Click Install Now, then Activate

  4. Navigate to Settings > reCaptcha in your WordPress admin menu

  5. Paste your Site Key and Secret Key from Step 1

  6. Select your reCAPTCHA version (must match what you chose in Google Admin Console)

  7. Click Test to verify your keys work correctly

  8. Scroll down to the form list and enable the checkbox for Client Portal Register Form

  9. Click Save Changes

WordPress reCAPTCHA settings page in admin dashboard sidebar under reCaptcha. Options include reCAPTCHA Version dropdown (Version 2, Version 3, Invisible), Site Key and Secret Key input fields with Test verification button, checkboxes to enable reCAPTCHA for Login form, Registration form, Reset password form, Comments form, and external plugins like Contact Form 7, Gravity Forms. Includes shortcode and plugin info.

Make sure you enable the checkbox specifically for Client Portal Register Form in the BestWebSoft settings, not just the generic "Registration form" option. Client Portal automatically registers its form with the plugin.

For detailed plugin instructions, visit the BestWebSoft reCAPTCHA user guide.

Step 3: Test your registration form

Visit your public registration page (the page where you added the [client_portal_register] shortcode or block).

  1. You should see the reCAPTCHA widget appear on the form before the submit button

  2. Fill out the registration fields (First Name, Last Name, Email)

  3. Complete the reCAPTCHA challenge if using v2 checkbox, or simply submit if using v3/Invisible

  4. Click Register or Complete Registration

Public-facing WordPress registration form titled Register For This Site with Username and E-mail fields, reCAPTCHA I'm not a robot checkbox, Registration confirmation will be e-mailed to you note, and blue Register button. Links for Log in and Lost password below.

If the reCAPTCHA verification fails, users will see a red error message: "The Google Recaptcha has failed." They can reload the page and try again.

Successful registration should create a new client portal and send the client an email notification with access instructions.

Troubleshooting common issues

reCAPTCHA widget not appearing

  • Verify the BestWebSoft plugin is active and the Client Portal Register Form checkbox is enabled

  • Check that your Site Key and Secret Key are correct and match the domain

  • Make sure your domain in Google Admin Console doesn't include http://, https://, or trailing slashes

  • Confirm you're using Client Portal 4.14.2 or later

reCAPTCHA keeps failing

  • If using reCAPTCHA v3, try switching to v2 or Invisible in both Google Admin Console and plugin settings

  • Check for browser ad blockers or privacy extensions that may block reCAPTCHA scripts

  • Disable other reCAPTCHA or CAPTCHA plugins that might conflict

  • Clear your browser cache and cookies, then test again

Wrong reCAPTCHA version showing

The version shown on your form must match what you selected in both Google Admin Console (Step 1) and the BestWebSoft plugin settings (Step 2). If they don't match, update both to the same version and test again.

Need help with client management? See How to add clients to your portals.

Was this helpful?
Was this helpful?