From the Simple Survey Setup tab, click on 'Optional Settings' and navigate to the "Bot Prevention" setting.

 

Toggle the setting on and navigate to the reCAPTCHA v3 Admin Console website to create a new site and collect the Site and Secret Keys.

To register a new Site, enter a label.

Then select reCAPTCHA v3 as the reCAPTCHA type.

In domains, add your Simple Survey Force.com Site without the https:// or the /survey at the end. This is shown in your Simple Survey Setup within the Bot Prevention section.

Example: thais.my.salesforce-sites.com

By the end, the page should look like this:

Go back to your newly configured site, expand the reCAPTCHA Keys section, and copy both keys into 'Specify your Site & Secret Keys' in the Simple Survey Setup Wizard.  Click 'Save Settings' on the top right of your page to ensure the keys are saved properly.

 

Once those are saved, on your reCAPTCHA page click 'Go To Settings'; here you can ensure your email address is added as an 'Owner' and check the remaining boxes.  Click 'Save' when done.

For 'Step 2. Define Google as a Remote Site', click on the 'click here' link to define Google as a remote site. You will be redirected to 'Remote Site Settings' in Salesforce's Setup.

Click the 'New Remote Site' button.

Enter GooglereCAPTCHA as the Remote Site Name.

Enter https://www.google.com as the Remote Site URL

Select the 'Active' checkbox and click on 'Save'. It should look like this:

Simple Survey uses reCAPTCHA, not a standard CAPTCHA.

• CAPTCHA is a generic term for bot-detection tools. Common examples include:
  • Typing distorted text from an image
  • Selecting images based on a prompt (e.g., "click all traffic lights")
• reCAPTCHA is Google's advanced version of CAPTCHA. It works invisibly in the background, assigning a risk score to help detect bots with minimal user friction.

Values closer to 1 indicate a high confidence that the survey taker is human, while values closer to 0 suggest the likely involvement of an email scanner or bot. Negative values indicate connection errors or invalid Site/Secret Keys. 

Please note that:

• Simple Survey avoids the creation of survey records if the Human Confidence Score falls under the bot threshold, so the issue of multiple, duplicate and empty surveys should no longer be observed, and only surveys coming from humans should be recorded

• (-3.#) A connection timeout occurred during reCAPTCHA verification.
       - (-3.0) - Failed to load the JavaScript API in time.
       - (-3.1) - Connection timeout retrieving the reCAPTCHA token.
       - (-3.2) - Connection timeout verifying the reCAPTCHA token.
•  (-4.0) - A general error occurred during reCAPTCHA verification. The most likely cause of this error is that Google was not properly configured as a Remote Site in Salesforce. If that is not the issue, please open a case with Vicasso Support by emailing simplesurvey@vicasso.com