Two fields is adequate. Image verification can be staged. With Javascript you can check that someone is actually clicking and not show a captcha. However, if Ja

Two fields is adequate. Image verification can be staged. With Javascript you can check that someone is actually clicking and not show a captcha. However, if JavaScript is switched off you can show a captcha so that you can stop bots trying to register.