> For the complete documentation index, see [llms.txt](https://wpcloudplugins.gitbook.io/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wpcloudplugins.gitbook.io/docs/global-options/security.md).

# Security

Adjust security settings to protect your cloud integration and ensure safe data management

### General

| Setting                         | Description                                                                                   |
| ------------------------------- | --------------------------------------------------------------------------------------------- |
| **Use random URLs for modules** | Disable this option to use the WordPress default, where the slug is generated from the title. |

### AJAX Request Checks

| Setting                       | Description                                                                                                                              |
| ----------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------- |
| **Cross domain verification** | Verifies if AJAX requests come from the same site; blocks requests from other domains for security. Disable only in multi-domain setups. |
| **Nonce Validation**          | Uses WordPress Nonce system to protect against CSRF attacks. Disable only if conflicts arise with other plugins.                         |

{% hint style="warning" %}
Please use this settings with caution! Only disable it when really necessary.
{% endhint %}

### Cloud Content Accessibility

| Setting                         | Description                                                                                                                      |
| ------------------------------- | -------------------------------------------------------------------------------------------------------------------------------- |
| **Validate file accessibility** | Checks if the requested file is in an accessible folder. Disable to improve performance or if users can access all content.      |
| **Mask Account ID**             | Obfuscates cloud account IDs in your site's source code and URLs. Disabling this could break existing links if the salt is lost. |

{% hint style="warning" %}
Please use this settings with caution! Only disable it when really necessary.
{% endhint %}

### Login & Password Screens

| Setting                       | Description                                                                                                                                       |
| ----------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Login Message**             | Message displayed when the user is prompted to log in.                                                                                            |
| **Login Url**                 | Set a custom login URL to be used in the login button of the modules.                                                                             |
| **Password Message Template** | Message shown when a module is password-protected and the user is prompted to enter the password.                                                 |
| **User Info Template**        | This message is displayed when a module requires users to enter user information (e.g. email address) before they are able to access the content. |

### ReCaptcha V3

reCAPTCHA protects you against spam and other types of automated abuse. With this reCAPTCHA (V3) integration module, you can block abusive downloads of your files by bots. Create your own credentials via your [reCaptcha Dashboard](https://www.google.com/recaptcha/admin).

| Setting        | Description                                                                                                           |
| -------------- | --------------------------------------------------------------------------------------------------------------------- |
| **Site Key**   | The site key is used to invoke the reCAPTCHA service on your site                                                     |
| **Secret Key** | The secret key authorizes communication between your application backend and the reCAPTCHA server to verify the user. |

{% hint style="warning" %}
Make sure that you are using **V3 keys**. If you already are using ReCaptcha on your site, e.g. in a Form, you might need to disable the ReCaptcha of this plugin to prevent conflicts.
{% endhint %}