

Parameter | Description |
Display name | The display name for the new CAPTCHA. |
Platform type | Set the platform type for integrating the CAPTCHA. Supports Web, iOS, and Android. Web: Select Web, then configure Domain to add the CAPTCHA(domain name validation is not required). iOS: Select iOS, then configure Bundle ID to add the CAPTCHA. Android: Select Android, then configure Package name to add the CAPTCHA. Notes: Domain name: Click the + on the right. Up to 10 can be added. |
CAPTCHA setting | CAPTCHA settings include Widget type, CAPTCHA behavior, Challenge type, and Security level. Widget type: Supports Minimal, Basic and Invisible. Minimal: Display the widget without brand. Basic: Display the basic widget. Invisible: Not display the widget. CAPTCHA behavior: Supports One-Click, Always and Frictionless. One-Click: Only suspicious users see challenge. Always: All users see the challenge. Frictionless: No users see the challenge. Challenge type: Supports Slider, Graphical and Voice. Slider: Drag the slider to complete the puzzle. Graphical: Click the correct graphics in order according to the prompt. Voice: Enter the CAPTCHA as prompted by the voice message. Security level: Supports Loose, General and Strict. Loose has the lowest interception level, while Strict has the highest. Auto-Block: When enabled, TencentCaptcha decides whether to block risky requests and require retry. Default OFF allows your site to take action in case of risk detected by TencentCaptcha. Notes: Invisible verification mechanism does not support managed interception policy settings. |
WAF Service | Select whether to integrate the WAF service. After enabling the WAF service, users who use both CAPTCHA and WAF services can apply the CAPTCHA results to WAF security policies. For detailed instructions, please refer to Integration with WAF. Notes: This option cannot be modified once saved. |
CaptchaAppId encryption | When enabled, the encrypted string should be passed in at the front end. For details, see CaptchaAppid Encryption Verification Capability Access Guide. |
Resource Tag | Tags are used to manage resources by category in different dimensions. |




Metric Name | Description |
Total CAPTCHA loads | Number of times the CAPTCHA was loaded by the client. |
Verification requests | Number of times verification was initiated after the user answered the CAPTCHA challenge. |
Passed verification requests | Number of times verification was passed. |
Blocked verification requests | Number of times verification was blocked (failed). |
Blocking rate | Rate of verification blocks (failures). |
Incorrect answers | Rate of verification blocks due to incorrect answers. |
Blocked insecure requests | Rate of verification blocks due to security policy enforcement. |
Requests to verify tickets | Number of times ticket validation was initiated by the server. |
Passed ticket verification requests | Number of times ticket validation was passed. |
Blocked ticket verification requests | Number of times ticket validation was blocked (failed). |





Parameter | Description |
Display name | The display name for the CAPTCHA. |
Platform type | Set the platform type for integrating the CAPTCHA. Supports Web, iOS, and Android. Web: Select Web, then configure Domain to add the CAPTCHA. iOS: Select iOS, then configure Bundle ID to add the CAPTCHA. Android: Select Android, then configure Package name to add the CAPTCHA. |
CAPTCHA setting | CAPTCHA settings include Widget type, CAPTCHA behavior, Challenge type, and Security level. Widget type: Supports Minimal, Basic and Invisible. Minimal: Display the widget without brand. Basic: Display the basic widget. Invisible: Not display the widget. CAPTCHA behavior: Supports One-Click, Always and Frictionless. One-Click: Only suspicious users see challenge. Always: All users see the challenge. Frictionless: No users see the challenge. Challenge type: Supports Slider, Graphical and Voice. Slider: Drag the slider to complete the puzzle. Graphical: Click the correct graphics in order according to the prompt. Voice: Enter the CAPTCHA as prompted by the voice message. Security level: Supports Loose, General and Strict. Loose has the lowest interception level, while Strict has the highest. Auto-Block: When enabled, TencentCaptcha decides whether to block risky requests and require retry. Default OFF allows your site to take action in case of risk detected by TencentCaptcha. Notes: Invisible verification mechanism does not support managed interception policy settings. |
IP Allowlist | After adding to the allowlist, risk control rules will not take effect for requests originating from IPs within this list. For detailed operations, please see Add Allowlist. |
WAF Service | Modification is not supported, please create a new CAPTCHA if changes are needed. |
CaptchaAppId encryption | When enabled, the encrypted string should be passed in at the front end. For details, see CaptchaAppid Encryption Verification Capability Access Guide. |
Resource Tag | Tags are used to manage resources by category in different dimensions. |



Parameter | Description |
List Name | Fill in the name of the allowlist. |
IP Address | Enter the IP address(es). Supports IPv4/IPv6 format and batch input. |
Description | Fill in the description. |



Feedback