4

I know that this question has been posted multiple times, but most of the answers are deprecated or not valid for 2025 since SafetyNet is deprecated for new apps and Android DeviceCheck API is also deprecated. There is only the Play Integrity API available now.

How can I disable the reCAPTCHA in Firebase phone-authentication? It does not appear for Google Login or Facebook Login, just for OTP.

It works fine for the iOS app, no reCAPTCHA using the same Firebase project.

I already have:

Google Play Integrity API

Enter image description here

with these default settings:

Enter image description here

I also added the SHA1 and SHA-256 keys into Firebase settings:

Enter image description here

Firebase App Check:

Enter image description here

I have discovered that it retrieves: Failed to initialize reCAPTCHA config: No Recaptcha Enterprise siteKey configured for tenant/project * error on the logcat. After the error, phoneAuthOptions turns false as it can be seen in the picture:

Enter image description here

How can I disable it?

5
  • "most of the answers are deprecated or not valid for 2025." - how did you reach this conclusion? In order to prevent your question from being closed as a duplicate, you should edit it to be clear why the other answers are no longer valid, or why you have a completely new question that's different from the others. Generally speaking, old questions get updated with new answers so that the information stays in one place, making it easier for others to find them in the future. Commented Feb 12 at 19:58
  • 2
    Done. There is no more SafetyNet for new apps. And Android DeviceCheck API is deprecated
    – Cipri
    Commented Feb 12 at 20:38
  • 1
    Instead of saying "in 2025", saying "without SafetyNet or DeviceCheck" would make the actual technical constraints more clear. Commented Feb 14 at 23:25
  • Please provide the error messages as text. Thanks in advance. Commented Mar 2 at 0:59
  • After extensive research, it appears that there is no available option to disable reCAPTCHA. There is no official way to completely remove reCAPTCHA on iOS using Firebase Phone Auth. This behaviour is enforced by Firebase for security/anti-abuse reasons, and Google does not provide a way to bypass it, even in production apps.? You can’t skip Firebase’s safety checks unless you use custom authentication. And in Android Firebase uses G-Play Integrity & SafetyNet behind the all over scenes. It verifies the device silentl. but this will work when user download the app through Gplay-store. Commented Apr 6 at 12:24

1 Answer 1

1

The issue is likely due to the type of release you are using. Play Integrity won't function with Debug or Internal App Sharing, only with a valid Google Play release. Once your app is published on Google Play, reCaptcha will no longer be used, and your user will receive the message immediately.

1
  • 1
    I will try out and release my app.
    – Cipri
    Commented Mar 4 at 10:00

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.