What CAPTCHA means
CAPTCHAs cut form spam and automated logins. Old-style puzzles frustrate people and can hurt accessibility, so many sites now use invisible or low-friction checks. Use them where spam or abuse is a real problem.
Why it matters for your website
Spam form entries waste time and can bury real leads, and automated sign-ups or logins create security risk. A CAPTCHA filters out many bots, but every puzzle adds friction for real people, so the right balance protects your inbox without costing you customers.
Example
A wedding venue adds an invisible CAPTCHA to its inquiry form. Spam drops sharply, and couples filling out the form never see a puzzle.
Tips
- Choose options that run in the background before puzzle-style challenges.
- Validate the CAPTCHA token on your server, not just in the browser.
- Test your forms on mobile after adding a CAPTCHA.
Common mistakes
- Using hard image puzzles that frustrate customers and hurt accessibility.
- Adding a CAPTCHA widget without server-side checks, so bots can skip it.
Questions about CAPTCHA
What is CAPTCHA?
A challenge, such as clicking a box or picking images, used to tell humans from bots on forms and logins.
Are CAPTCHAs bad for accessibility?
Puzzle-based CAPTCHAs can be hard for people with visual or cognitive disabilities. Invisible or low-friction options with accessible fallbacks are a better choice.
What can I use instead of a CAPTCHA?
Honeypot fields, rate limiting, server-side filtering and invisible verification tools can block much spam with less friction. Many sites combine a few of these.
