{"section":"announcements","requestedLocale":"en","requestedSlug":"2025-09-01-checkout-new-recaptcha-validation","locale":"en","slug":"2025-09-01-checkout-new-recaptcha-validation","path":"docs/en/announcements/2025/september/2025-09-01-checkout-new-recaptcha-validation.md","branch":"main","content":"To improve security during checkout, we added a new layer of protection in the store [reCAPTCHA](/en/docs/tutorials/using-recaptcha-at-checkout) validation. Now, store [hosts](/en/docs/tutorials/configuring-the-store-domain#store-address-structure) are validated through [License Manager](/en/docs/tutorials/roles), which is the systems that checks user permissions for completing actions in the platform.\n\n## What has changed?\n\nThe Checkout system now checks if the host where the reCAPTCHA validation challenge is solved, such as `www.mystore.com`, exists in the License Manager module of that account. This helps prevent malicious access and fraud attempts. \n\nTo see the account hosts, use the [Get stores](https://developers.vtex.com/docs/api-reference/license-manager-api#get-/api/vlm/account/stores) endpoint. If you want to add a new host to your store, check [Configuring the store domain](/en/docs/tutorials/configuring-the-store-domain#registering-a-new-host).\n\n## What needs to be done?\n\nAfter adding hosts to the account, [configure reCAPTCHA](https://developers.vtex.com/docs/guides/recaptcha) in your store. If your store uses custom integrations at checkout, you need to make sure that [reCAPTCHA is integrated](https://developers.vtex.com/docs/guides/implementing-recaptcha-in-integrations) correctly with them.\n\nStores already using their own [reCaptcha keys](https://cloud.google.com/recaptcha/docs/create-key-website) in integrations as a validation method don't need to do anything."}