Note: EchoBrain’s Anti-spam Protection dropdown now offers Google reCAPTCHA v3 instead of v2. This guide is kept for reference, but if you’re setting up spam protection today, follow our Google reCAPTCHA v3 guide instead. The steps for setting up your keys in EchoBrain itself haven’t changed much if you still specifically need v2 — but since we no longer actively maintain this guide, double-check Google’s own reCAPTCHA v2 documentation to confirm the HTML snippet below still matches what Google currently expects.

Spam submissions are one of those problems that seem minor until they’re not — fake entries, junk data, and notifications that lead nowhere. The good news is that EchoBrain lets you enable Google reCAPTCHA v2 on your forms in just a few steps. This guide walks you through the whole process from scratch, including how to add the widget directly to your Fourthwall site.

Step 1: Create Your reCAPTCHA in Google Admin Console

Before configuring anything in EchoBrain, you need to generate your reCAPTCHA keys directly from Google.

1. Open the Google reCAPTCHA Admin Console in your browser. Sign in with your Google account if prompted.

1. Fill out the registration form with the following details:

   • Label: enter a descriptive name to identify this reCAPTCHA (e.g. Contact Form - My Shop).
   • reCAPTCHA type: select “Challenge (v2)”, then choose “I’m not a robot” Checkbox.
   • Domains: add your website’s domain (e.g. myshop.com).

1. Accept the Terms of Service and click Submit.

Step 2: Copy Your Secret Key

After submitting, Google will display two keys:

• Site Key: used on the frontend — in your form’s HTML to render the reCAPTCHA widget.
• Secret Key: used on the backend to verify responses. This is the key you need to copy for EchoBrain.

Copy the Secret Key and keep it somewhere safe. You’ll need it in the next step.

Step 3: Enable reCAPTCHA on Your EchoBrain Form

With your Secret Key ready, it’s time to configure the protection in EchoBrain.

1. Log in to your EchoBrain account and go to the admin panel.
2. In the left-side menu, click on Forms.
3. Click on the form you want to protect to open and edit it.

Note: this screenshot reflects the current EchoBrain dashboard. If you don’t see “Google reCAPTCHA” as a v2-specific option in the Anti-spam Protection dropdown, that’s expected — as mentioned above, EchoBrain now only offers Google reCAPTCHA v3 there.

1. On the form editing screen, scroll down until you find the Spam section.

2. In the “Anti-spam protection” field, open the dropdown and select Google ReCAPTCHA.

3. In the “Anti-spam secret key service:” field, paste the Secret Key you copied in Step 2.

4. Click Save to apply your changes.

That’s it! EchoBrain will now automatically verify every submission on that form against Google’s reCAPTCHA service before processing it.

Step 4: Add the reCAPTCHA Widget to Your Fourthwall Form

The final step is adding the reCAPTCHA widget to the actual HTML form on your Fourthwall site, so visitors can complete the “I’m not a robot” challenge before submitting.

1. Log in to your Fourthwall dashboard.
2. Go to Site Design in the left-side menu.
3. Locate the page section that contains your form’s Custom HTML and click on it to edit it.

1. Inside the <form> element, add the following two snippets:

   • The Google reCAPTCHA script — place it inside the <form> tag, before the closing </form>:

<script src="https://www.google.com/recaptcha/api.js" async defer></script>

• The reCAPTCHA widget — place it just before your submit button, replacing YOUR_SITE_KEY with the Site Key you got in Step 2:

<div class="g-recaptcha" data-sitekey="YOUR_SITE_KEY"></div>

Your form should look something like this:

<form action="https://form.echo-brain.com/your-form-endpoint" method="POST" enctype="multipart/form-data">
  <input type="text" name="firstName" placeholder="First Name" required>
  <input type="email" name="email" placeholder="Email" required>

  <script src="https://www.google.com/recaptcha/api.js" async defer></script>
  <div class="g-recaptcha" data-sitekey="YOUR_SITE_KEY"></div>

  <button type="submit">Submit</button>
</form>

1. Click Save to publish your changes.

Your form is now fully protected. Visitors will see the reCAPTCHA checkbox before they can submit, and EchoBrain will verify the response on the backend using your Secret Key.

Conclusion

Enabling Google reCAPTCHA v2 on your EchoBrain forms is a four-step process: create your keys in Google, copy the Secret Key, configure it in EchoBrain, and add the widget to your Fourthwall form. In just a few minutes you’ll have an extra layer of protection keeping your submissions clean and reliable.

Have questions? Reach out to support. And if you haven’t set up your forms yet, check out our custom forms guide to get started from scratch.

Ready to protect your forms? Log in to EchoBrain today and enable spam protection in minutes.