Configuring reCaptcha

For added security you can require reCaptcha when users complete these actions in the portal site:

  • Registering new accounts
  • Recovering forgotten usernames
  • Resetting passwords
  • Making payments

Rhythm for Civics uses Google's reCaptcha service. To configure reCaptcha you must first obtain a site key and a secret key from Google. The necessary keys can be obtained at https://www.google.com/recaptcha/admin.

Portal configuration

These settings in the Portal configuration are used to configure reCaptcha:

  • The reCAPTCHA node under the Setup node is used to enable reCaptcha for the Anonymous Payment and Forgot Username widgets.

Widgets

Use the widget configurations to configure reCaptcha for these widgets:

  • Rhythm Billing Anonymous Payment
  • Rhythm Billing Create Profile
  • Rhythm Billing Forgot Password
  • Rhythm Billing Forgot Username
  • Rhythm Billing Payment

See Configuring widgets.

For the Anonymous Payment, Create Profile, Forgot Password, and Password widgets, set the Require reCaptcha option to True and enter your site key in the Google reCaptcha Site Key (public key) field.

For the Rhythm Billing Forgot Username widget, the Setup > reCAPTCHA node in the Portal configuration is used to enable reCaptcha. The public key is specified in the widget configuration.

Finally, to use reCaptcha, port 443 must be open for outbound traffic.