Submit Feedback
Legacy Knowledge Base
Published Jun. 30, 2025

How to Disable CAPTCHA on Server Admin Pages

Written By

Emma Carr-Gardner

How To articles are not official guidelines or officially supporteddocumentation. They are community-contributed content and may not alwaysreflect the latest updates to Liferay DXP. We welcome your feedback toimprove How to articles!

While we make every effort to ensure this Knowledge Base is accurate, itmay not always reflect the most recent updates or official guidelines.We appreciate your understanding and encourage you to reach out with anyfeedback or concerns.

Legacy Article

You are viewing an article from our legacy "FastTrack"publication program, made available for informational purposes. Articlesin this program were published without a requirement for independentediting or verification and are provided "as is" withoutguarantee.

Before using any information from this article, independently verify itssuitability for your situation and project.

Issue

  • How do you disable CAPTCHA on pages?
  • Site Administration pages like the Gogo Shell now have a CAPTCHA verification.
  • How do you disable CAPTCHA on pages? Adding “-1” (Never Check), doesn’t work.
  • Previously, CAPTCHA could be “disabled” by navigating to Control Panel → Configuration → System Settings → Security Tools → CAPTCHA. Then setting the maximum challenges to “-1” (never check).

Environment

  • Liferay DXP 2024.Q1.7+

Resolution

To further strengthen security and prevent unauthorized access to administrative controls, Liferay has made CAPTCHA verification mandatory for all omni-admin actions. Therefore, as of 2024.Q1.7, this is expected behavior, see Configuring CAPTCHA.

This additional layer of protection provides sufficient Cross-Site Request Forgery attack protection for omni-admin actions.

In case you still want to disable captchas for these pages:

  • Add captcha.enforce.disabled=true to your portal-ext.properties file.
  • After that, navigate to Control Panel -> System Settings -> Security Tools -> Captcha and set the Maximum Challenges field's value to -1 in order to disable Captcha Validation.

You should only do this for testing with Continuous Integration (CI).

 

Breaking Changes:

  • Due to this security enhancement, the previously available option to disable CAPTCHA verification using the "-1" (Never Check) value is not applicable to administrative actions. 
  • If a CAPTCHA engine is not selected within your Liferay DXP configuration (i.e. the option is left on “Choose an Option”), Server Admin Pages will become inaccessible and display a "Temporarily Unavailable" message.

Additional Information

Did this article resolve your issue ?
Legacy Knowledge Base
Did this article resolve your issue ?