Availablescore, no checkbox

reCAPTCHA v3

No checkbox, no puzzle. Google's script watches the visitor and returns a score between 0.0 (very likely a bot) and 1.0 (very likely a person). Your server decides what to do below a threshold you choose; Google suggests starting at 0.5.

Vendor

Google

Launched

October 2018

Type

Invisible, score-based

Can I install it?

Yes, with a key from the reCAPTCHA admin console

Price

Free up to 10,000 assessments per month, then paid

Replace with

CleanTalk: invisible too, but a verdict with a reason instead of a score

Check your own score

cleantalk.org key

Google publishes a test key for v2 only. There is no public test key for v3, so the live demo runs on this site's own key on the reCAPTCHA score test page.

0.0 - 1.0score range

Suggested threshold0.5

Visible to the visitornothing, except the badge

See my reCAPTCHA v3 score Time it in the full test

What the visitor goes through

Nothing visible except the reCAPTCHA badge in the corner. The script loads on every page where it is installed and sends behaviour data to Google.
A low score does not show a puzzle: the site owner decides, in code, whether to block, ask for email confirmation or let it through. Many sites block silently, and the visitor never learns why the form "did not work".

How it gets bypassed

Headless browsers with real Chrome fingerprints and warmed-up Google cookies routinely score 0.7 and above; solver services sell "v3 tokens with score 0.9".
Scores in staging differ from production and drift over time, so a threshold that works today can start rejecting real customers next month (Google's own documentation warns about this).
Human spam scores like any human.

What it costs

Zero seconds for the visitor who passes, and an invisible wall for the one who does not. The cost moves from time to lost submissions you cannot see. Privacy is the second cost: the script runs site-wide and reports to Google.

Embed code

Load the script with your own key, call execute on submit, send the token to your server, verify, then read the score.

<script src="https://www.google.com/recaptcha/api.js?render=YOUR_SITE_KEY"></script>
<script>
grecaptcha.ready(function () {
  grecaptcha.execute('YOUR_SITE_KEY', { action: 'submit' }).then(function (token) {
    // put the token into a hidden field and submit the form;
    // server: POST https://www.google.com/recaptcha/api/siteverify, read "score" and "action"
  });
});
</script>

Invisible like v3, but with a verdict and a reason

No score to guess a threshold for. CleanTalk returns allow or deny and says why: blacklisted email, bad IP, spam text. Nothing for the visitor to click.

1,105,000+ websites protectedup to 99.97% accuracylive in 60 seconds7-day free trial, no card

Start 7-day free trial Run the full test

Sources: Google reCAPTCHA v3 developer guide (render, execute, score 0.0 to 1.0, threshold 0.5, staging scores differ from production); Google reCAPTCHA FAQ (test keys apply to v2); Google reCAPTCHA pricing. Related: reCAPTCHA v2, Turnstile. CleanTalk is not affiliated with Google.