Fix a failing Test API Response
Updated September 13, 2026
When the Test API Response check on the settings page fails, it reports an error code returned by Google. That code tells you exactly what is wrong. Until the test passes, reCAPTCHA is not added to the WordPress login form.
invalid-input-secret
The secret key is wrong, or it is not a reCAPTCHA v2 Challenge key. Check three things:
- You have not swapped the site key and secret key between the two fields.
- Both keys come from the same site entry in the Google console. Keys from two different entries never validate against each other.
- The key was created with the Challenge (v2) type. v3 and Invisible keys are not supported.
missing-input-secret
The secret key reached Google empty. Re-paste it and save. If you define keys in wp-config.php, check the constant name is spelled exactly RECAPTCHA_WOO_SECRET_KEY, since a typo leaves the value empty.
missing-input-response
You pressed TEST RESPONSE without ticking the checkbox first. Tick it, wait for the tick to turn green, then submit. The plugin shows “Please verify that you are human.” for this case.
invalid-input-response
The token was malformed, already used or expired. Reload the settings page for a fresh widget and try again without pausing in between.
timeout-or-duplicate
Too much time passed between ticking the box and submitting, or the same token was sent twice. Reload the page and complete both steps promptly.
The test never completes or the page hangs
If no result comes back at all, your server probably cannot make outbound HTTPS requests to google.com. This is common on locked-down or firewalled hosting.
Ask your host to allow outbound HTTPS to www.google.com. In regions where Google services are blocked, reCAPTCHA cannot work at all and a different CAPTCHA service is the only option.
The widget itself shows an error instead of a checkbox
If the test box contains a Google error rather than a tickable checkbox, the problem is the site key rather than the secret. The domain you are on is not registered against that key. Add it in the Google reCAPTCHA admin console.