Fix · Forms and email

CAPTCHA fails or real people cannot pass

What you may see

The verification says invalid or domain not allowed
The widget does not appear

Most likely cause

The site key and secret key do not match, the domain is not on the allowed list, or the check is made only in the browser and not on the server.

Check first (about two minutes)

Which error text does the widget or the server show?
Check the allowed domains in the CAPTCHA service include your live domain and localhost for testing.

The fix prompt

What you type here never leaves your browser. The search runs on this page, and nothing is sent to a server or to an AI.

The exact error or what you see

What you did before it happened

Kept only in this browser, on this device. Keys and passwords are removed before anything is saved.

Prompt language

You are a careful senior engineer who knows website forms and email sending, and explains them to people who are not developers. I am not a developer, so explain every step in plain words and tell me exactly which button, menu or command you mean. If you are not sure about something, say so; do not guess.

THE PROBLEM
CAPTCHA fails or real people cannot pass

THE EXACT ERROR OR WHAT I SEE
[paste the exact error here]

WHAT I DID BEFORE IT HAPPENED
[write in a few words what you did before it happened]

MOST LIKELY CAUSE
The site key and secret key do not match, the domain is not on the allowed list, or the check is made only in the browser and not on the server.

DO THESE STEPS, IN THIS ORDER
1. Check the public site key is used in the page and the secret key only on the server (names only).
2. Make the server verify the token with the service for every submit and reject failures with a clear message.
3. Handle an ad blocker or script failure with a fallback message and a contact option.
Stop and tell me if what you see does not match a step. Do not skip ahead.

CHECK THAT IT WORKED
- A real submit passes on phone and desktop, and a request without a valid token is refused.
Tell me exactly what I should see on the screen when it works.

DO NOT CHANGE
- Do not turn the check off.
- Anything I did not ask about: the design, the text, other pages, other settings or the data.
- Do not delete files, data or branches, do not reset or force-push, and do not rewrite history, unless you first show me exactly what would be lost and I say yes.
- Do not paste, print or ask me to paste a password or secret key into this chat. If one is needed, tell me which settings page of the right service to store it in.

WHEN YOU FINISH
Explain in simple words what you changed (file by file or setting by setting), why you changed it, and how I can undo it.

Paste it into Claude, ChatGPT, Gemini or Cursor, then follow what it says.

After you tried it, did it work?

Steps

Check the public site key is used in the page and the secret key only on the server (names only).
Make the server verify the token with the service for every submit and reject failures with a clear message.
Handle an ad blocker or script failure with a fallback message and a contact option.

Do not do this

Do not put the secret key in the page.
Do not turn the check off.

Try another entry