Verifications

1. Verifications

   This screen holds four protections: email verification for new accounts, CAPTCHA against bot form submissions, site ownership codes for search engines and ad platforms, and advertising and tracking tags. This tour walks through each card.

2. Save

   Saves every card on this page at once. A check mark appears when saving succeeds.

3. Email verification

   Require new accounts to confirm their email address before they can use them. Without an SMTP server no email can be sent, so verification stays off even while this switch is on.

4. CAPTCHA protection

   Protects your forms, such as the contact form, against bots. Get the keys from the CAPTCHA provider's dashboard.

5. Choose a provider

   Off (honeypot and rate limiting stay active), Google reCAPTCHA or Cloudflare Turnstile. For reCAPTCHA, pick v2 (checkbox) or v3 (invisible); with v3 you can also hide the badge.

6. Protected areas

   Choose which forms require verification, such as the contact form, login, registration, password reset and the AI chatbot (off by default).

7. Site and secret keys

   Paste the keys from your provider. The secret key is stored encrypted and never shown again; leave it blank to keep the saved one.

8. Site ownership verification

   Paste only the content value of the meta tag that Google Search Console, Bing, Yandex or Meta gives you. The tag is added to your site's head automatically.

9. Google HTML file

   An alternative Search Console verification: paste the file name Google gives you (for example google1234abcd.html) and it is served at your domain root automatically.

10. Advertising and tracking tags

    Enter your IDs for Google Tag Manager, Google Analytics 4, Google Ads, Meta Pixel, Yandex Metrica, Microsoft Ads UET or TikTok Pixel. Only the tags you fill in are added to your site.

11. Cookie consent

    Tracking tags stay disabled until a visitor accepts analytics or marketing cookies in the cookie banner, so your site stays GDPR compliant.