Configure Google reCAPTCHA

To use the Google reCAPTCHA service, instances that are running on a domain other than require an API key pair from Google. The process described in this topic is optional for instances that are running on the domain.

Before you begin

Role required: admin

About this task


Because on-premises instances do not have access to the Internet, they cannot use the Google reCAPTCHA service. Do not follow the process described in this topic. Instead, set the system property to false. This setting enables the CAPTCHA service that is provided with the base system.

The Password Reset Windows Application uses the base-system CAPTCHA service even if the Password Reset application is configured to use Google reCAPTCHA.


  1. Request an API key pair (a site key and a secret) from Google at
  2. Set the following system properties: Set to true.

    Type: string

    Default: true

    google.captcha.site_key Set to the site key that Google provided.

    Type: string

    Default: A site key that Google provided to ServiceNow

    google.captcha.secret Set to the secret that Google provided.

    Type: password2

    Default: An encrypted secret that Google provided to ServiceNow