Skip to content

Google Recaptcha missing-input-secret

Was trying to make Google Recaptcha work but kept getting failed attempts and the error missing-input-secret back.

After checking 100 times that my secret key was correct, I realized they want URL parameters in the POST request to validate the captcha value.

I was sending the values in the body:

const response = await fetch('https://www.google.com/recaptcha/api/siteverify', {
  method: "POST",
  headers: {
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    secret: CAPTCHA_SITE_SECRET,
    response: CAPTCHA_VALUE_FROM_CLIENT
  })
})

Instead, this worked:

const response = await fetch('https://www.google.com/recaptcha/api/siteverify?' 
	+ new URLSearchParams({
    secret: CAPTCHA_SITE_SECRET,
    response: CAPTCHA_VALUE_FROM_CLIENT
  }), {
  method: "POST",
})

→ Here's my latest YouTube video

→ Get my JavaScript Beginner's Handbook

→ I wrote 17 books to help you become a better developer, download them all at $0 cost by joining my newsletter

JOIN MY CODING BOOTCAMP, an amazing cohort course that will be a huge step up in your coding career - covering React, Next.js - next edition February 2025

Bootcamp 2025

Join the waiting list