Send feedback
Setup overview for websites
Stay organized with collections
Save and categorize content based on your preferences.
This document provides a high-level overview of setting up Google Cloud Fraud Defense
on websites.
Setting up Fraud Defense on a website involves the following steps:
Create a reCAPTCHA key for your website (also known as key).
The key is required to collect information about the user actions and send it to Fraud Defense.
Choose the key type that is best for your use case .Create a key for your website . Integrate with your website frontend:
Install the key that you created on your web pages by using
the reCAPTCHA JavaScript API.
Integrate with your backend:
To verify the token sent by reCAPTCHA and assess the risk,
create assessments
from your backend server.
Interpret the assessment scores and the associated risk ,
and define how to handle users, for example, allow the user to log in only
when the score is high and the risk is low. Optional: Configure an IP address allowlist
Add trusted IP addresses to an allowlist to exclude them from
Fraud Defense enforcement.
What's next
Send feedback
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-10-19 UTC.
Need to tell us more?
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2026-10-19 UTC."],[],[]]
