--- title: Enable CAPTCHA for External User Registration description: The sn\_ext\_usr\_reg.captchaEnabled controls if CAPTCHA will be validated for external user registration. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/instance-security-hardening-settings/sc-enable-captcha-external-user-registration.html release: australia product: Instance Security Hardening Settings classification: instance-security-hardening-settings topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Authentication, Hardening settings, Platform Security] --- # Enable CAPTCHA for External User Registration The **sn\_ext\_usr\_reg.captchaEnabled** controls if CAPTCHA will be validated for external user registration. If the **sn\_ext\_usr\_reg.captchaEnabled** system property is not set to the recommended value of **true**, then CAPTCHA isn't validated for external user registration and could lead to automatic account creation attacks. Ensure that the property **sn\_ext\_usr\_reg.captchaEnabled** is set to **true**. ## More information
| Attribute | Description |
|---|---|
| Configuration name | **sn\_ext\_usr\_reg.captchaEnabled** |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | <none> |
| Fallback value | true |
| Category | [Authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-authentication.md) |
| Security risk | - Severity score: 3.7 - CVSS rating: Low - Security risk details: Enforcing CAPTCHA is critical to prevent bot-driven attacks and maintain the integrity of user onboarding. |
| Functional impact | None |
| Dependencies and prerequisites | None |