[ edit: I want to point out that at this point in time, captcha means reCaptcha and my comment is regarding that ] Good point. But I like to point out that, cap

[ edit: I want to point out that at this point in time, captcha means reCaptcha and my comment is regarding that ] Good point. But I like to point out that, captcha is Ok, but need not be as complex and user hostile as reCaptcha! The "advanced bot in computer imaging" excuse is questionable, as if you provide something so valuable to warrant advanced spammer bots, you definitely have resources to develop your own captcha/rate-limiting, but in most cases it is likely just lazy engineering team and overinflated ego. If you try to bruteforce giants, like Google/Amazon, you'll be greeted by age old "squiggly captcha". Only in gmail signup forms you may face a reCaptcha but much simpler one, but on logins it is squiggly 9/10 times in Google and Amazon is only squiggly. There is a lesson to be learned here (my 2cents) In most cases, nearly all reCaptcha hostility is waved away from google side with same old excuse "the site using reCaptcha service has the ability to adjust the aggressiveness, so if you face very hostile behavior, please report to that site owner to make adjustments". What happens in most cases is, lazy engineering team just throws in the reCaptcha and sets everything to ultra hostile. During testing, they probably disable it, so the hostility is not visible to them. Rant begin -- All sites I come across with a captcha on login/signup page, always have the issue of "login/signup session/token expired, try again" once I have solved recaptcha, so need to reload page, but recaptcha detects that I just solved it seconds ago, so probably bruteforce and gets more aggressive and reaching to a point of impossible to login/signup anymore. I have emailed plenty services regarding this hostility and the response is almost always along the lines of "we added captcha to protect your data and privacy, we value security blah blah plenty bs... we are sorry for your inconvenience". So in protest, I just leave the service/deregister whenever it is viable. Rand end ---