Find hCaptcha parameters

An hCaptcha task needs websiteURL (the page showing the captcha) and websiteKey (the site key, a UUID); Enterprise sites sometimes also need rqdata. All can be found with the browser’s developer tools (F12).

websiteKey

Method 1: page source. In the Elements panel press Ctrl+F (Cmd+F on Mac) and search for data-sitekey:

<div class="h-captcha" data-sitekey="3ceb8624-1970-4e6b-91d5-70317b70b651"></div>

The data-sitekey value is the websiteKey.

Method 2: network requests. In the Network panel search for hcaptcha and find the checksiteconfig request; the value after sitekey= is the websiteKey:

https://api.hcaptcha.com/checksiteconfig?v=...&host=example.com&sitekey=51829642-2cda-4b09-896c-594f89d700cc&sc=1&swa=1

websiteURL

The full URL of the page that shows the captcha, not hcaptcha.com. The host= in the request above is that page’s domain.

rqdata (Enterprise)

Some sites use hCaptcha Enterprise and issue an rqdata value each time the captcha loads; without it the token won’t pass. It usually appears in a response from the site’s own API (for example a captcha_rqdata field returned by a login call), or is passed to hcaptcha.render / hcaptcha.setData. Put it in the task’s rqdata field. It is usually single use, so fetch a fresh one each time.

userAgent

userAgent must be the value returned by /useragent; submit the token with the userAgent returned in the result.