title: Recaptcha subdomain and multitenancy
body: <p>I'm using google Recaptcha v2.0 for my application.</p>
  <p>This is a multitenancy app in which we create a subdomain for each tenants:</p>
  <ul>
  <li>tenant1.myapp.com</li>
  <li>tenant2.myapp.com</li>
  <li>tenant3.myapp.com</li>
  </ul>
  <p>Until now, we are registering manually each subdomain in the Google Recaptcha Admin.</p>
  <p>I wonder if in terms of security if could be enough (and safe) to just register the main domain:</p>
  <ul>
  <li>app.com</li>
  </ul>
  <p>&quot;if you specify the API key pair to yoursite.com, the following table shows whether or not reCAPTCHA will work for the domain and its subdomain variations&quot;</p>
  <p><a href="https://i.stack.imgur.com/xpCgy.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/xpCgy.png" alt="enter image description here" /></a></p>