Setup

Google reCAPTCHA

Sana uses Google reCAPTCHA to increase the security level of a webstore, prevent spam attacks and protect it from bots.

 NOTE

Sana supports Google reCAPTCHA v2.

reCAPTCHA is a test to check whether the user is a human or not. You can add the Google reCAPTCHA widget to the following pages of a Sana webstore as an extra security check to deter bots from using these forms:

• Contact us
• Tell a friend
• Creating a new account (online customer registration)
• Forgot password
• Write a review

 NOTE

Starting from Sana 9.3.1, you can add the Google reCAPTCHA widget to the "Creating a new account" and "Write a review" pages of a Sana webstore.

Starting from Sana 9.3.3, you can add the Google reCAPTCHA widget to the "Forgot password" page of a Sana webstore.

Sana supports two types of Google reCAPTCHA:

• I'm not a robot (Checkbox): It requires the user to click on a checkbox indicating that the user is not a robot.
  
  
  
• Invisible: It does not require the user to click on a checkbox or any other actions at all, instead it is invoked directly when the user clicks on the "Submit" button on the page.
  
  

To start using Google reCAPTCHA, you need to sign up for an API key pair for your webstore. The key pair consists of a site key and secret key. The site key is used to invoke the reCAPTCHA service on the Sana webstore. The secret key authorizes communication between Sana and the reCAPTCHA server to verify the user's response. The secret key needs to be kept safe for security purposes.

How to register a Sana webstore and generate the site key and secret key

Step 1: Go to the Google reCAPTCHA admin panel and sign in with your Google account. If you don't have a Google account, create it.

Step 2: Enter some label. This can be anything you want, for example the name of your company, or webstore domain.

Step 3: Choose the type of reCAPTCHA v2 you want to show in the Sana webstore, either "Checkbox" or "Invisible". Currently, Sana supports Google reCAPTCHA v2. Later you can generate the keys for another type of reCAPTCHA, if you want to change it.

Step 4: Enter your webstore domain.

Step 5: Accept the reCAPTCHA Terms of Service and click Register.

Now you can see the key pair - Site key and Secret key.

To add Google reCAPTCHA to the pages of the Sana webstore, you will need to enter these keys in Sana Admin.

How to set up Google reCAPTCHA in Sana

Step 1: In Sana Admin click: Setup > Security > Captcha settings.

Step 2: Enable CAPTCHA and choose the type of reCAPTCHA for which you generated the keys in the Google reCAPTCHA admin panel.

Step 3: Enter the Site key and Secret key.

Open your web store and check the pages where you added the Google reCAPTCHA widget. You should see Google reCAPTCHA at the bottom of the forms.