Setting up spam protection with Google reCAPTCHA

    Your task/initial situation

    You would like to protect your JTL-Shop forms against spam bots. The spam protection Google reCAPTCHA can help you with that. It is available as a plug-in in the JTL-Extension Store.


    • You need a free Google user account (e.g. an email account with the Google service Gmail).
    • Your online shop is connected to the JTL-Extension Store via your JTL user account.

    Step 1: Activation of Google reCAPTCHA for your website

    You first need to activate Google reCAPTCHA for your website.

    Please note: These instructions refer to the activation on the Google website. It is only intended as additional guidance and might deviate from the actual process.
    1. Visit
    2. Click Admin Console. The page Register a new site opens.
    3. Log in to your Google user account.
    4. Enter a label, select reCAPTCHA v2as the reCAPTCHA type and enter the domain for which you want to use Google reCAPTCHA.
    Hint: Make sure to leave out the initial “http://” when you enter the domain.

    On the following page you will then find the Google reCAPTCHA website key and the secret key.

    1. Note down both keys for step 3.

    Step 2: Downloading the Google reCAPTCHA plug-in.

    Step 3: Activating Google reCAPTCHA in JTL-Shop

    Now you need to enter the website and secret key created for Google reCAPTCHA in step 1 in JTL-Shop.

    1. Log in to the back end of JTL-Shop with your admin access data.
    2. Go to Installed plug-ins > JTL Google reCAPTCHA v2.
    3. In Google reCAPTCHA v2 Integration, select whether the feature is to be integrated as a widget that must be completed by your customers or as an invisible background application.
    4. Into Google reCAPTCHA website key, enter the website key you noted down in step 1.
    5. Into Google reCAPTCHA secret key, enter the secret key you noted down in step 1.
    6. In Theme and Size, select the appearance option you prefer for Google reCAPTCHA. These settings are only visible when Google reCAPTCHA is depicted as a widget.
    1. Go to the tab Test reCAPTCHA. You should now get a success message.
    2. Click Save to apply your changes.
    3. Now enable spam protection in the corresponding settings for all forms in which you want to use spam protection; for example, for the contact form, the form for questions about the item or the Forgot passoword function.

    The enabled spam protection will now be used in all forms for which it is enabled. Google reCAPTCHA opens when submitting the form.