Recaptcha for login

[Shashirokz]

Description

Recaptcha is configurable at Register stage. Following this Recaptcha can be enabled at Login stage in a new realm. Cannot configure in master realm.

How can Recaptcha be configured for Login stage?

[ahus1]

Thank you for raising this idea. I'm marking this as an enhancement.

@mposolda / @ssilvert / @edewit - is something like that planned for the new login theme?

[ssilvert]

@ahus1 This is not something that is planned at the moment, but I will add it to our list. We are going to go through the exercise of prioritizing enhancements very soon.

[ariferol]

I have reviewed and activated Keycloak’s brute-force attack protection settings. However, I have observed that Google’s "reCAPTCHA" project offers numerous features that could benefit enterprise projects, particularly in terms of brute-force attack protection, human recognition capabilities, and free functionalities. Originally launched in 2007, reCAPTCHA was acquired by Google in 2009 and continues to be developed. According to my research, even the free version is actively being improved by Google's team to address security threats, bot detection, and spam reduction, and it has established itself within a large developer community. Given these capabilities, I believe that having optional support for "reCAPTCHA" in Keycloak features would greatly benefit all Keycloak users.

Thank you in advance for your efforts.

[nvmnghia]

Hi, I see that in Register page Keycloak has recaptcha. Then why doesn't this one also have it? Thanks!

[jonkoops]

Hi, I see that in Register page Keycloak has recaptcha. Then why doesn't this one also have it? Thanks!

Because it has not been implemented, that is why this issue exists :man_shrugging: