{"id":5977,"date":"2026-10-09T18:00:51","date_gmt":"2026-10-09T09:00:51","guid":{"rendered":"https:\/\/donguri3.net\/server-tech\/luxeritas-recaptcha-v3-setup-guide-2\/"},"modified":"2026-10-09T18:00:52","modified_gmt":"2026-10-09T09:00:52","slug":"luxeritas-recaptcha-v3-setup-guide","status":"publish","type":"post","link":"https:\/\/donguri3.net\/en\/server-tech\/wordpress-blog-seo\/luxeritas-recaptcha-v3-setup-guide\/","title":{"rendered":"Step-by-Step Guide to Configuring reCAPTCHA v3 in Luxeritas and Obtaining API Keys"},"content":{"rendered":"

The comment section, where you receive feedback and questions from blog readers, is a valuable touchpoint for engagement. However, when you make a comment section public, spam submissions by bots are an unavoidable challenge.<\/p>\n

Traditional spam countermeasures typically involved image authentication requiring distorted alphanumeric characters or hiragana, or image-selection tiles asking you to “Select all images with traffic lights” (reCAPTCHA v2). However, these force unnecessary actions on submitters, creating a point of friction that causes users to abandon submitting comments altogether. To block malicious bots while avoiding any extra burden on readers, implementing “Google reCAPTCHA v3,” which automatically analyzes behavior in the background, is the ideal solution.<\/p>\n

Operational Policy: Zero Authentication Effort for Readers<\/h2>\n

When strengthening our spam countermeasures, we placed top priority on a design that does not compromise the reader experience.<\/p>\n

The goal of this configuration is “to require zero authentication actions (such as typing characters, clicking checkboxes, or selecting images) from readers when posting a comment.”<\/p>\n

Because the WordPress theme “Luxeritas” has built-in integration features for reCAPTCHA v3, you can implement advanced spam countermeasures while maintaining reader convenience simply by generating an API key on Google’s side and configuring it in the theme.<\/p>\n

reCAPTCHA Version Specifications and Key Acquisition Precautions<\/h2>\n

The most important point to keep in mind when implementing Google reCAPTCHA is API key version compatibility.<\/p>\n

Google reCAPTCHA comes in versions like “v2 (Checkbox type \/ Invisible badge type)” and “v3 (Score-based type).” Because their internal specifications are completely different, registering a key generated for v2 into the Luxeritas v3 settings field will cause an authentication error and fail to work.<\/p>\n

Additionally, there are two types of API keys: the “Site Key (Public Key),” which is called on the frontend, and the “Secret Key (Private Key),” which is used for server-side verification. You must obtain these without mixing them up and enter them accurately into the designated fields in Luxeritas.<\/p>\n

Procedure for Generating API Keys in the Google Admin Console<\/h2>\n

First, access the Google reCAPTCHA admin console and register your site.<\/p>\n

While logged into your Google account, open the registration page below:<\/p>\n

https:\/\/www.google.com\/recaptcha\/admin\/create<\/a><\/p>\n

Fill out the displayed registration form as follows:<\/p>\n

    \n
  1. Label: Enter any identifying name (e.g., Nando Kobo or donguri3.net).<\/li>\n
  2. reCAPTCHA Type: Make sure to select “reCAPTCHA v3.”<\/li>\n
  3. Domains: Enter the domain name of your target blog (the hostname excluding protocols and slashes) (e.g., donguri3.net).<\/li>\n
  4. Accept the Google Cloud Platform Terms of Service: Check the consent box.<\/li>\n<\/ol>\n

    Once you have finished entering the information, click “Submit.”<\/p>\n

    \"Google<\/a><\/p>\n

    Once registration is complete, your “Site Key” and “Secret Key” will be displayed on the screen.<\/p>\n

    \"Site<\/a><\/p>\n

    Since these keys will be used later in the WordPress admin screen, leave this screen open or copy them into a notepad or similar.<\/p>\n

    Registering Keys in Luxeritas and Setting Score Thresholds<\/h2>\n

    Once you have obtained the keys, log in to your WordPress admin screen and register them in Luxeritas.<\/p>\n

      \n
    1. From the left menu of the admin screen, open Luxeritas > Customize (or Appearance > Customize).<\/li>\n
    2. Open the Comment or reCAPTCHA settings section within the Customizer.<\/li>\n
    3. Enable “reCAPTCHA v3” from the image authentication options.<\/li>\n
    4. Paste the “Site Key” and “Secret Key” you obtained earlier into their respective input fields.<\/li>\n
    5. Configure the “reCAPTCHA v3 Score Threshold” (leaving it at the default value of 0.5 is fine).<\/li>\n
    6. Click “Publish” to save your settings.<\/li>\n<\/ol>\n

      \"Luxeritas<\/a><\/p>\n

      *The judgment score is evaluated between 0.0 (definitely a bot) and 1.0 (definitely a human). Operate with the default value of 0.5; if spam slips through, you can adjust it upwards to 0.6 or 0.7, or lower the value if legitimate submitters are being blocked.<\/p>\n

      Operation Verification and Log Checking on the Comment Form<\/h2>\n

      After saving your settings, verify whether everything is working correctly.<\/p>\n

      Because reCAPTCHA evaluation processes are designed to be skipped when you are logged into WordPress, make sure to open an incognito\/private browser window or open the article’s comment section while logged out.<\/p>\n

      Enter a “Name” and “Message” in the comment section and click the submit button. If no UI elements like image authentication or checkboxes appear, and the comment is successfully posted immediately, the configuration is complete.<\/p>\n

      \"Simple<\/a><\/p>\n

      Additionally, if you open the Google reCAPTCHA admin console (Analytics), you can check the number of requests and the distribution graph of evaluated scores.<\/p>\n

      https:\/\/www.google.com\/recaptcha\/admin<\/a><\/p>\n

      \"Google<\/a><\/p>\n

      If communication is functioning normally, the number of requests for the date and time you ran the test submission will be counted, and scores evaluated as human (around 0.7 to 0.9) will be recorded.<\/p>\n

      *If clicking the submit button results in “Failed to connect to the authentication server” or status code “418 I’m a teapot” and comments cannot be sent, interference from filter hooks by the theme or custom plugins is suspected. For detailed troubleshooting and resolution steps in that case, please refer to the following troubleshooting article:<\/p>\n

      https:\/\/donguri3.net\/server-tech\/wordpress-blog-seo\/luxeritas-recaptcha-v3-comment-form-fields-418\/<\/a><\/p>\n

      kdc \u30af\u30ec\u30b8\u30c3\u30c8\u30ab\u30fc\u30c9\u7528\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30b3\u30fc\u30c9\u4fdd\u8b77\u30b7\u30fc\u30eb \u30ab\u30fc\u30c9\u306e\u304a\u307e\u3082\u308a \u5265\u304c\u3055\u308c\u305f\u4e8b\u304c\u5206\u304b\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fc\u30b3\u30fc\u30c9\u8997\u304d\u898b\u9632\u6b62 \u76ee\u96a0\u3057\u30b7\u30fc\u30eb 18\u7247\u5165\u308a<\/a><\/p>\n

      Conclusion<\/h2>\n

      To block bot spam while eliminating input burdens such as image selection, we implemented Google reCAPTCHA v3 in Luxeritas. We obtained the v3 site key and secret key from the Google admin console, registered them in the Luxeritas Customizer, and set the score threshold. Through test submissions in a logged-out state and verifying score logs in the Google admin console, we have successfully established an environment where comments can be accepted safely and comfortably without forcing any authentication steps on readers at all.<\/p>\n","protected":false},"excerpt":{"rendered":"

      The comment section, where you receive feedback and questions from blog readers, is a valuable touchpoint for […]<\/p>\n","protected":false},"author":4,"featured_media":5752,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_locale":"en_US","_original_post":"https:\/\/donguri3.net\/?p=5743","footnotes":""},"categories":[1166],"tags":[125,52,61,10,179],"class_list":["post-5977","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-wordpress-blog-seo","tag-api","tag-https","tag-wordpress","tag-server","tag-179","en-US"],"_links":{"self":[{"href":"https:\/\/donguri3.net\/wp-json\/wp\/v2\/posts\/5977","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/donguri3.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/donguri3.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/donguri3.net\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/donguri3.net\/wp-json\/wp\/v2\/comments?post=5977"}],"version-history":[{"count":1,"href":"https:\/\/donguri3.net\/wp-json\/wp\/v2\/posts\/5977\/revisions"}],"predecessor-version":[{"id":5980,"href":"https:\/\/donguri3.net\/wp-json\/wp\/v2\/posts\/5977\/revisions\/5980"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/donguri3.net\/wp-json\/wp\/v2\/media\/5752"}],"wp:attachment":[{"href":"https:\/\/donguri3.net\/wp-json\/wp\/v2\/media?parent=5977"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/donguri3.net\/wp-json\/wp\/v2\/categories?post=5977"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/donguri3.net\/wp-json\/wp\/v2\/tags?post=5977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}