---
title: "Configure reCAPTCHA - Amplia Reg"
description: "How to protect the Amplia Reg API from abuse with Google reCAPTCHA: create an invisible reCAPTCHA v2 project and set its keys in the configuration."
canonical: "https://docs.lacunasoftware.com/en-us/articles/amplia-reg/on-premises/settings/configure-recaptcha"
locale: "en"
product: "Amplia Reg"
last_updated: "2026-07-14"
---

# Configure reCAPTCHA - Amplia Reg

[Amplia Reg](https://docs.lacunasoftware.com/en-us/articles/amplia-reg/on-premises) uses [Google reCAPTCHA](https://developers.google.com/recaptcha) to protect the API from abuse by ensuring that API requests
were indeed originated by a human operator and not an automated bot.

> **Note**
>
> Enabling reCAPTCHA is essential in production environments to protect the API from abuse

## Create a reCAPTCHA project

1. Sign in to the [Google reCAPTCHA admin console](https://www.google.com/recaptcha/admin)
1. On the *Register a new site* form, fill out:
   * A **label** of your choice, e.g. `My Amplia Reg`
   * Select **reCAPTCHA v2**, then **Invisible reCAPTCHA badge**
   * Type the **domain** of your Amplia Reg instance, e.g. `ampliareg.yourcompany.com`
   * Accept the terms of service
1. Click on **Submit**
1. Copy the **site key** and the **secret key**

## Configuring Amplia Reg

Having both keys, edit the Amplia Reg configuration file and fill the section **Recaptcha**, settings **SiteKey** and **SecretKey**.

Example (*.ini* or *.conf* file):

```ini
[Recaptcha]
SiteKey=6LdfItkZAAAAAIxxxxxxxxxxxxxxxxxxxxxxxxxx
SecretKey=6LdfItkZAAAAALxxxxxxxxxxxxxxxxxxxxxxxxxx
```

Example (environment variables):

```sh
Recaptcha__SiteKey=6LdfItkZAAAAAIxxxxxxxxxxxxxxxxxxxxxxxxxx
Recaptcha__SecretKey=6LdfItkZAAAAALxxxxxxxxxxxxxxxxxxxxxxxxxx
```

## See also

* [Amplia Reg on-premises](https://docs.lacunasoftware.com/en-us/articles/amplia-reg/on-premises/settings)