Bonus: What W3C Says on CAPTCHAs?

Source: W3C

CAPTCHAs are designed to keep automated bots away from websites, but traditional tests create major barriers for people with disabilities. Many sites ask users to read blurry text or click specific images, which is extremely difficult or impossible for people who are blind or visually impaired. Audio alternatives are often suggested as a fallback, but these do not work for users who are deaf or hard of hearing. Furthermore, complex logic puzzles and strict time limits add extra stress for people with cognitive or learning disabilities. As security systems make these tests even harder to stop smart bots, they end up locking out real human users who simply interact with technology differently.

To fix this problem, modern websites are moving away from interactive puzzles and switching to invisible security methods. Instead of forcing users to solve a test, new systems work quietly in the background to check if a visitor behaves like a real person. For example, a website can look at simple patterns, like how a mouse moves or how pages are clicked, without asking the user to do anything extra. Other approaches let users prove their identity just once through their device or browser, using secure digital keys that automatically confirm they are human. By taking the pressure off the user and handling verification behind the scenes, websites can stay safe from bots while remaining completely easy and accessible for everyone.