Google reCAPTCHA v3

Overview

The plugin supports Google reCAPTCHA v3 to protect job application forms from spam and automated submissions. reCAPTCHA v3 works invisibly in the background — applicants do not need to solve any challenges.

Getting reCAPTCHA Keys

Visit the Google reCAPTCHA admin console and register your site:

1. Click + Create to add a new site.
2. Enter a label (e.g., your site name).
3. Select Score based (v3) as the reCAPTCHA type.
4. Add your domain(s).
5. Submit the form and copy the Site Key and Secret Key.

Plugin Configuration

Navigate to Loxo Jobs → Settings and scroll to the Job Application section:

1. Check Enable reCAPTCHA.
2. Enter your Site Key (public key shown to visitors).
3. Enter your Secret Key (private key used for server-side verification).
4. Optionally adjust the Score Threshold (default: 0.5). Scores range from 0.0 (likely bot) to 1.0 (likely human). A lower threshold is more permissive.

How It Works

• When reCAPTCHA is enabled, the Google reCAPTCHA v3 script is loaded on pages with the application form.
• When a visitor submits the form, a token is generated in the background and included with the submission.
• The plugin validates the token with Google’s API, checking the returned score against your threshold.
• If the score is below the threshold, the application is rejected with an error message: “reCAPTCHA validation failed. Please try again.”
• If validation passes, the application proceeds normally.

Score Threshold Guidelines

• 0.3 — Very permissive. Use if legitimate users are being blocked.
• 0.5 — Default. Good balance for most sites.
• 0.7 — Strict. May block some real users on shared networks or VPNs.