You are here:
Protect Conversations in Enhanced Chat for Web with reCAPTCHA
Looking to secure your Enhanced Chat for Web channels from automated threats? Enable reCAPTCHA v3. With reCAPTCHA verification, only human users can initiate messaging sessions. Using reCAPTCHA verification enhances protection against spam bots.
Required Editions
| View supported editions. | |
This article applies to:
|
Enhanced Web Chat channels |
This article doesn’t apply to:
|
Enhanced In-App Chat, Enhanced WhatsApp, Standard and Enhanced Facebook Messenger, Standard and Enhanced SMS, Enhanced Apple Messages for Business, Enhanced LINE, and Bring Your Own Channel |
This feature is available only for API and Web customers—not yet for Mobile.
Google reCAPTCHA is a resource leveraged by Salesforce to support its users and partners and is provided by Google LLC. Google reCAPTCHA is a Non-SFDC Application for purposes of the Salesforce Main Services Agreement and is subject to the applicable Google terms and conditions and policies.
When enabled, reCAPTCHA v3 displays a badge above the chat button displaying Google’s reCAPTCHA Terms and Conditions and Privacy Policy. As required by Google, you must display reCAPTCHA Terms and Conditions and the Privacy Policy link to end users as part of the workflow.
Enabling reCAPTCHA v3 sets a non-essential cookie, _GRECAPTCHA, on the client browser. Google uses this cookie for risk analysis only.Blocking these cookies will still not affect the primary functionality of reCAPTCHA.
-
Sign up on the Google reCAPTCHA website.
- Enhanced Web Chat supports only reCAPTCHA v3.
- Make sure that reCAPTCHA is supported in your region. This feature may not be accessible in countries where Google is banned and reCAPTCHA URLs are blocked.
- During site registration, add the domain of web page where the chat button is embedded so reCAPTCHA can function as intended.
- Copy the Site Key and Secret Key for your registered domain to enable reCAPTCHA.
- From Setup, enter Messaging Settings in the Quick Find box.
- Enable reCAPTCHA Verification for your mesaging channel by selecting the checkbox.
- Add a New API Key Pair. Enter the API Key Pair Developer Name, and then add the reCAPTCHA API Site Key and reCAPTCHA API Secret Key received while registering your domain with Google, and click Add.
- Save your configuration.
- Go to Embedded Service Deployment Settings and Publish to make sure changes are reflected.
- If you’re an API customer, load the client-side reCAPTCHA scripts, generate the clientToken, and send it via the accessToken APIs. Enabling reCAPTCHA from Salesforce Setup may introduce an average latency of approximately 500 milliseconds to accessToken API call.
To customize the badge placement, you can hide the default badge and replace it with a custom one. To hide the default badge, add this CSS:
.embeddedMessagingGRecaptchaBanner {
display: none;
}
