Spam protection on the review form works differently than it used to — ReviewX now ships a math-based CAPTCHA on by default, with Google reCAPTCHA available as an optional upgrade for stores that want it. Both live under a dedicated Security settings tab rather than mixed in with general review options.
Default: Math CAPTCHA (no setup required)
Out of the box, every review form shows a simple math challenge (e.g. “3 + 4 = ?”) before a customer can submit a review. It requires no API keys and no configuration — it’s on unless you switch to Google reCAPTCHA or turn it off entirely from Reviews → Review Settings.
Optional: Google reCAPTCHA (v2 or v3)
If you’d rather use Google’s reCAPTCHA — useful if you’re already using it elsewhere on your site, or want its bot-detection scoring — here’s how to switch:
Step 1: Generate your reCAPTCHA keys
- Go to the Google reCAPTCHA admin console and sign in.
- Register a new site: give it a label, choose a type — reCAPTCHA v2 (“I’m not a robot” checkbox) or reCAPTCHA v3 (invisible, score-based) — and list your site’s domain(s).
- Accept the terms and submit. Google gives you a Site Key and a Secret Key — copy both.
Step 2: Add the keys in ReviewX
- In wp-admin, go to ReviewX → General Settings → Security.
- Select which version you registered — v2 (checkbox) or v3 (invisible).
- Paste your Site Key and Secret Key.
- Click Save.
The review form now shows Google reCAPTCHA instead of the math challenge.
Switching back to math CAPTCHA
Simply clear the Google reCAPTCHA keys (or toggle the option off) in Security settings — the math challenge resumes automatically as the fallback, so your review form is never left without spam protection.
