Does Brandkit support Captcha defences on user registrations?

Yes.

You can set Google reCaptcha of hCaptcha for the User Registration page to protect against bots registering User Accounts.

We offer either Google’s reCaptcha services of hCaptcha. However we recommend hCaptcha in most cases because Google’s reCaptcha is not usable in China.

Do I need a Captcha?

If you allow users to self-register (common for Pro and Enterprise Editions) you should always have a Captcha in place.

If you’re on Team edition where self-registration is not available or your Pro/Enterprise edition account is configured with no self-registration (is invite only), a Captcha is not needed.

How to setup

You can find Captcha settings in Admin > Settings > User Authentication.

reCaptcha

You have selected Google reCAPTCHA as your captcha provider.

Steps to setup:

1. Go to https://www.google.com/recaptcha/admin/create
2. Select Challenge(v2) - “I’m not a robot” tickbox.
3. Add all the domains for your application and submit.
4. Copy the generated Site Key and Secret Key to the inputs on the User Authentication settings page in Brandkit.
5. Click the Enable Captcha checkbox.
6. Scroll down to the bottom oif the page and click Save.

hCaptcha

1. Signup or login to the hCaptcha dashboard - the link is provided on the User Authentication settings page.
2. Go to the Sites tab in the hCapcha dashboard and create a new sitekey and copy it in the input below.
3. Go to the Settings tab in the dashboard and generate your secret key by clicking Generate New Secret and copy it in the input below.
4. Click the Enable Captcha checkbox.
5. Scroll down to the bottom oif the page and click Save.

Note: You can only choose one option here: None, reCaptcha or hCaptcha. Choose wisely.