✅ Step-by-step
1) Open your project security console and register the web app.
2) Choose reCAPTCHA v3 and copy the Site Key.
3) Paste the Site Key into Admin Panel → Protection (App Check) and save.
4) Keep App Check in Monitoring mode first (do not enforce yet).
5) Test your portal pages. When verified requests are showing correctly, you can enforce protection.