Does Recaptcha v3 show graphical captchas at all?












2















I currently use invisible recaptcha and it automatically shows a captcha if it thinks the user is a bot.



Now there is Recaptcha v3 and I struggle to understand how it is supposed to be used.



It returns a score, but what if the score is low which may indicate the user is a robot. Should I then show the graphical captcha by calling some function? Or should I simply pop up a dialog that captcha thinks you're a bot and that's it?



So what I don't get: what should happen if the user gets a low score? Is there a way for the user to still proceed by solving a captcha? Or is it the end of the road then and there is no way to go forward?



Does/can recaptcha v3 show graphical captchas to solve at all?






recaptcha captcha







share|improve this question



























    2















    I currently use invisible recaptcha and it automatically shows a captcha if it thinks the user is a bot.



    Now there is Recaptcha v3 and I struggle to understand how it is supposed to be used.



    It returns a score, but what if the score is low which may indicate the user is a robot. Should I then show the graphical captcha by calling some function? Or should I simply pop up a dialog that captcha thinks you're a bot and that's it?



    So what I don't get: what should happen if the user gets a low score? Is there a way for the user to still proceed by solving a captcha? Or is it the end of the road then and there is no way to go forward?



    Does/can recaptcha v3 show graphical captchas to solve at all?






    recaptcha captcha







    share|improve this question

























      2












      2








      2








      I currently use invisible recaptcha and it automatically shows a captcha if it thinks the user is a bot.



      Now there is Recaptcha v3 and I struggle to understand how it is supposed to be used.



      It returns a score, but what if the score is low which may indicate the user is a robot. Should I then show the graphical captcha by calling some function? Or should I simply pop up a dialog that captcha thinks you're a bot and that's it?



      So what I don't get: what should happen if the user gets a low score? Is there a way for the user to still proceed by solving a captcha? Or is it the end of the road then and there is no way to go forward?



      Does/can recaptcha v3 show graphical captchas to solve at all?






      recaptcha captcha







      share|improve this question














      I currently use invisible recaptcha and it automatically shows a captcha if it thinks the user is a bot.



      Now there is Recaptcha v3 and I struggle to understand how it is supposed to be used.



      It returns a score, but what if the score is low which may indicate the user is a robot. Should I then show the graphical captcha by calling some function? Or should I simply pop up a dialog that captcha thinks you're a bot and that's it?



      So what I don't get: what should happen if the user gets a low score? Is there a way for the user to still proceed by solving a captcha? Or is it the end of the road then and there is no way to go forward?



      Does/can recaptcha v3 show graphical captchas to solve at all?






      recaptcha captcha




      recaptcha captcha






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Nov 25 '18 at 8:28









      TomTom

      4,54742542




      4,54742542
























          1 Answer
          1






          active

          oldest

          votes


















          2














          The idea is no user friction, and displaying a captcha runs contrary to that. Recall that you should put ReCaptcha v3 on all pages, not only on those you want to protect: that’s how the captcha will learn to distinguish normal from abusive behaviors. A user must be always allowed to proceed. Low scores should be used to prioritize or further qualify requests.



          For example, in analytics you may want to discard bot/scraper interactions with low scores. In commerce, you want to deprioritize bot orders – don’t count them in day’s sales, put them last in the queue and require human verification on your end, or an additional verification step i.e. an email challenge. In logins, low scores would force 2nd factor verification step. And so on – your question cannot be further answered without knowing the exact use for the page you ask about.






          share|improve this answer
























          • Ah, so in v3 no captcha should be shown at all. On my page there are multiple links which run certain heavier computations, so I don't want a bot (or a crazy user) to click all the links. For this reason I currently run invisible recaptcha before running a computation behind a llink, because it only allows the operation to run if the user is either not a bot or passed the captcha. So a lower score does not really help me here, because if the score is low I still have to make sure the user is not a bot (passes the captcha), I only want to run it if the user passes the test.

            – Tom
            Nov 25 '18 at 9:26











          • A low score means you should re-authenticate the user, for example. Using visible captcha won’t be enough at that point: low score means that things aren’t right and without a strong indication that a human is present, you can simply discard the request. Showing a visible captcha will likely get answered by a human captcha farm, or something like that, and certainly won’t shield you from bots. Recaptcha v2 is susceptible to human captcha farms. Those are cheap and in widespread use. When v3 fails, you know that captcha has failed: further use of catcha is opening up doors to bots.

            – Kuba Ober
            Nov 25 '18 at 21:23













          • @KubaOber "Recaptcha v2 is susceptible to human captcha farms." How does v3 get around it? Presumably a human looks like a human to reCaptcha v3, otherwise it's not working!

            – poshest
            Nov 29 '18 at 10:18











          • "displaying a captcha runs contrary to that"... but this seems to mention, under the Personalization > "type" heading that challenges will be shown. Perhaps v3 only means no initial tick box?

            – poshest
            Nov 29 '18 at 10:45











          Your Answer






          StackExchange.ifUsing("editor", function () {
          StackExchange.using("externalEditor", function () {
          StackExchange.using("snippets", function () {
          StackExchange.snippets.init();
          });
          });
          }, "code-snippets");

          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "1"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53465827%2fdoes-recaptcha-v3-show-graphical-captchas-at-all%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          1 Answer
          1






          active

          oldest

          votes








          1 Answer
          1






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes









          2














          The idea is no user friction, and displaying a captcha runs contrary to that. Recall that you should put ReCaptcha v3 on all pages, not only on those you want to protect: that’s how the captcha will learn to distinguish normal from abusive behaviors. A user must be always allowed to proceed. Low scores should be used to prioritize or further qualify requests.



          For example, in analytics you may want to discard bot/scraper interactions with low scores. In commerce, you want to deprioritize bot orders – don’t count them in day’s sales, put them last in the queue and require human verification on your end, or an additional verification step i.e. an email challenge. In logins, low scores would force 2nd factor verification step. And so on – your question cannot be further answered without knowing the exact use for the page you ask about.






          share|improve this answer
























          • Ah, so in v3 no captcha should be shown at all. On my page there are multiple links which run certain heavier computations, so I don't want a bot (or a crazy user) to click all the links. For this reason I currently run invisible recaptcha before running a computation behind a llink, because it only allows the operation to run if the user is either not a bot or passed the captcha. So a lower score does not really help me here, because if the score is low I still have to make sure the user is not a bot (passes the captcha), I only want to run it if the user passes the test.

            – Tom
            Nov 25 '18 at 9:26











          • A low score means you should re-authenticate the user, for example. Using visible captcha won’t be enough at that point: low score means that things aren’t right and without a strong indication that a human is present, you can simply discard the request. Showing a visible captcha will likely get answered by a human captcha farm, or something like that, and certainly won’t shield you from bots. Recaptcha v2 is susceptible to human captcha farms. Those are cheap and in widespread use. When v3 fails, you know that captcha has failed: further use of catcha is opening up doors to bots.

            – Kuba Ober
            Nov 25 '18 at 21:23













          • @KubaOber "Recaptcha v2 is susceptible to human captcha farms." How does v3 get around it? Presumably a human looks like a human to reCaptcha v3, otherwise it's not working!

            – poshest
            Nov 29 '18 at 10:18











          • "displaying a captcha runs contrary to that"... but this seems to mention, under the Personalization > "type" heading that challenges will be shown. Perhaps v3 only means no initial tick box?

            – poshest
            Nov 29 '18 at 10:45
















          2














          The idea is no user friction, and displaying a captcha runs contrary to that. Recall that you should put ReCaptcha v3 on all pages, not only on those you want to protect: that’s how the captcha will learn to distinguish normal from abusive behaviors. A user must be always allowed to proceed. Low scores should be used to prioritize or further qualify requests.



          For example, in analytics you may want to discard bot/scraper interactions with low scores. In commerce, you want to deprioritize bot orders – don’t count them in day’s sales, put them last in the queue and require human verification on your end, or an additional verification step i.e. an email challenge. In logins, low scores would force 2nd factor verification step. And so on – your question cannot be further answered without knowing the exact use for the page you ask about.






          share|improve this answer
























          • Ah, so in v3 no captcha should be shown at all. On my page there are multiple links which run certain heavier computations, so I don't want a bot (or a crazy user) to click all the links. For this reason I currently run invisible recaptcha before running a computation behind a llink, because it only allows the operation to run if the user is either not a bot or passed the captcha. So a lower score does not really help me here, because if the score is low I still have to make sure the user is not a bot (passes the captcha), I only want to run it if the user passes the test.

            – Tom
            Nov 25 '18 at 9:26











          • A low score means you should re-authenticate the user, for example. Using visible captcha won’t be enough at that point: low score means that things aren’t right and without a strong indication that a human is present, you can simply discard the request. Showing a visible captcha will likely get answered by a human captcha farm, or something like that, and certainly won’t shield you from bots. Recaptcha v2 is susceptible to human captcha farms. Those are cheap and in widespread use. When v3 fails, you know that captcha has failed: further use of catcha is opening up doors to bots.

            – Kuba Ober
            Nov 25 '18 at 21:23













          • @KubaOber "Recaptcha v2 is susceptible to human captcha farms." How does v3 get around it? Presumably a human looks like a human to reCaptcha v3, otherwise it's not working!

            – poshest
            Nov 29 '18 at 10:18











          • "displaying a captcha runs contrary to that"... but this seems to mention, under the Personalization > "type" heading that challenges will be shown. Perhaps v3 only means no initial tick box?

            – poshest
            Nov 29 '18 at 10:45














          2












          2








          2







          The idea is no user friction, and displaying a captcha runs contrary to that. Recall that you should put ReCaptcha v3 on all pages, not only on those you want to protect: that’s how the captcha will learn to distinguish normal from abusive behaviors. A user must be always allowed to proceed. Low scores should be used to prioritize or further qualify requests.



          For example, in analytics you may want to discard bot/scraper interactions with low scores. In commerce, you want to deprioritize bot orders – don’t count them in day’s sales, put them last in the queue and require human verification on your end, or an additional verification step i.e. an email challenge. In logins, low scores would force 2nd factor verification step. And so on – your question cannot be further answered without knowing the exact use for the page you ask about.






          share|improve this answer













          The idea is no user friction, and displaying a captcha runs contrary to that. Recall that you should put ReCaptcha v3 on all pages, not only on those you want to protect: that’s how the captcha will learn to distinguish normal from abusive behaviors. A user must be always allowed to proceed. Low scores should be used to prioritize or further qualify requests.



          For example, in analytics you may want to discard bot/scraper interactions with low scores. In commerce, you want to deprioritize bot orders – don’t count them in day’s sales, put them last in the queue and require human verification on your end, or an additional verification step i.e. an email challenge. In logins, low scores would force 2nd factor verification step. And so on – your question cannot be further answered without knowing the exact use for the page you ask about.







          share|improve this answer












          share|improve this answer



          share|improve this answer










          answered Nov 25 '18 at 8:56









          Kuba OberKuba Ober

          70.5k983192




          70.5k983192













          • Ah, so in v3 no captcha should be shown at all. On my page there are multiple links which run certain heavier computations, so I don't want a bot (or a crazy user) to click all the links. For this reason I currently run invisible recaptcha before running a computation behind a llink, because it only allows the operation to run if the user is either not a bot or passed the captcha. So a lower score does not really help me here, because if the score is low I still have to make sure the user is not a bot (passes the captcha), I only want to run it if the user passes the test.

            – Tom
            Nov 25 '18 at 9:26











          • A low score means you should re-authenticate the user, for example. Using visible captcha won’t be enough at that point: low score means that things aren’t right and without a strong indication that a human is present, you can simply discard the request. Showing a visible captcha will likely get answered by a human captcha farm, or something like that, and certainly won’t shield you from bots. Recaptcha v2 is susceptible to human captcha farms. Those are cheap and in widespread use. When v3 fails, you know that captcha has failed: further use of catcha is opening up doors to bots.

            – Kuba Ober
            Nov 25 '18 at 21:23













          • @KubaOber "Recaptcha v2 is susceptible to human captcha farms." How does v3 get around it? Presumably a human looks like a human to reCaptcha v3, otherwise it's not working!

            – poshest
            Nov 29 '18 at 10:18











          • "displaying a captcha runs contrary to that"... but this seems to mention, under the Personalization > "type" heading that challenges will be shown. Perhaps v3 only means no initial tick box?

            – poshest
            Nov 29 '18 at 10:45



















          • Ah, so in v3 no captcha should be shown at all. On my page there are multiple links which run certain heavier computations, so I don't want a bot (or a crazy user) to click all the links. For this reason I currently run invisible recaptcha before running a computation behind a llink, because it only allows the operation to run if the user is either not a bot or passed the captcha. So a lower score does not really help me here, because if the score is low I still have to make sure the user is not a bot (passes the captcha), I only want to run it if the user passes the test.

            – Tom
            Nov 25 '18 at 9:26











          • A low score means you should re-authenticate the user, for example. Using visible captcha won’t be enough at that point: low score means that things aren’t right and without a strong indication that a human is present, you can simply discard the request. Showing a visible captcha will likely get answered by a human captcha farm, or something like that, and certainly won’t shield you from bots. Recaptcha v2 is susceptible to human captcha farms. Those are cheap and in widespread use. When v3 fails, you know that captcha has failed: further use of catcha is opening up doors to bots.

            – Kuba Ober
            Nov 25 '18 at 21:23













          • @KubaOber "Recaptcha v2 is susceptible to human captcha farms." How does v3 get around it? Presumably a human looks like a human to reCaptcha v3, otherwise it's not working!

            – poshest
            Nov 29 '18 at 10:18











          • "displaying a captcha runs contrary to that"... but this seems to mention, under the Personalization > "type" heading that challenges will be shown. Perhaps v3 only means no initial tick box?

            – poshest
            Nov 29 '18 at 10:45

















          Ah, so in v3 no captcha should be shown at all. On my page there are multiple links which run certain heavier computations, so I don't want a bot (or a crazy user) to click all the links. For this reason I currently run invisible recaptcha before running a computation behind a llink, because it only allows the operation to run if the user is either not a bot or passed the captcha. So a lower score does not really help me here, because if the score is low I still have to make sure the user is not a bot (passes the captcha), I only want to run it if the user passes the test.

          – Tom
          Nov 25 '18 at 9:26





          Ah, so in v3 no captcha should be shown at all. On my page there are multiple links which run certain heavier computations, so I don't want a bot (or a crazy user) to click all the links. For this reason I currently run invisible recaptcha before running a computation behind a llink, because it only allows the operation to run if the user is either not a bot or passed the captcha. So a lower score does not really help me here, because if the score is low I still have to make sure the user is not a bot (passes the captcha), I only want to run it if the user passes the test.

          – Tom
          Nov 25 '18 at 9:26













          A low score means you should re-authenticate the user, for example. Using visible captcha won’t be enough at that point: low score means that things aren’t right and without a strong indication that a human is present, you can simply discard the request. Showing a visible captcha will likely get answered by a human captcha farm, or something like that, and certainly won’t shield you from bots. Recaptcha v2 is susceptible to human captcha farms. Those are cheap and in widespread use. When v3 fails, you know that captcha has failed: further use of catcha is opening up doors to bots.

          – Kuba Ober
          Nov 25 '18 at 21:23







          A low score means you should re-authenticate the user, for example. Using visible captcha won’t be enough at that point: low score means that things aren’t right and without a strong indication that a human is present, you can simply discard the request. Showing a visible captcha will likely get answered by a human captcha farm, or something like that, and certainly won’t shield you from bots. Recaptcha v2 is susceptible to human captcha farms. Those are cheap and in widespread use. When v3 fails, you know that captcha has failed: further use of catcha is opening up doors to bots.

          – Kuba Ober
          Nov 25 '18 at 21:23















          @KubaOber "Recaptcha v2 is susceptible to human captcha farms." How does v3 get around it? Presumably a human looks like a human to reCaptcha v3, otherwise it's not working!

          – poshest
          Nov 29 '18 at 10:18





          @KubaOber "Recaptcha v2 is susceptible to human captcha farms." How does v3 get around it? Presumably a human looks like a human to reCaptcha v3, otherwise it's not working!

          – poshest
          Nov 29 '18 at 10:18













          "displaying a captcha runs contrary to that"... but this seems to mention, under the Personalization > "type" heading that challenges will be shown. Perhaps v3 only means no initial tick box?

          – poshest
          Nov 29 '18 at 10:45





          "displaying a captcha runs contrary to that"... but this seems to mention, under the Personalization > "type" heading that challenges will be shown. Perhaps v3 only means no initial tick box?

          – poshest
          Nov 29 '18 at 10:45




















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Stack Overflow!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid …



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53465827%2fdoes-recaptcha-v3-show-graphical-captchas-at-all%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          -

          Popular posts from this blog

          Costa Masnaga

          Image
          .mw-parser-output .avviso .mbox-text-div>div,.mw-parser-output .avviso .mbox-text-full-div>div{font-size:90%}.mw-parser-output .avviso .mbox-image div{width:52px}.mw-parser-output .avviso .mbox-text-full-div .hide-when-compact{display:block} Questa voce o sezione sull'argomento Lombardia non cita le fonti necessarie o quelle presenti sono insufficienti . Puoi migliorare questa voce aggiungendo citazioni da fonti attendibili secondo le linee guida sull'uso delle fonti. Segui i suggerimenti del progetto di riferimento. Costa Masnaga comune Localizzazione Stato   Italia Regione Lombardia Provincia Lecco Amministrazione Sindaco Sabina Panzeri (Al centro il cittadino) dall'08/06/2009 Territorio Coordinate 45°46′N 9°17′E  /  45.766667°N 9.283333°E 45.766667; 9.283333  ( Costa Masnaga ) Coordinate: 45°46′N 9°17′E  /  45.766667°N 9.283333°E 45.766667; 9.283333  ( Costa Masnaga ) Altitudine 318 m s.l.m...
          Read more

          Fotorealismo

          Image
          Guerrino Boatto, Venice's St. Barnaba Church and canal Il fotorealismo è un genere di pittura basato sull'uso di una o più fotografie dalle quali l'artista prende le informazioni necessarie da utilizzare poi nel processo della creazione dell'opera, in genere ad olio o ad acrilico, al fine di avere un aspetto finale il più simile possibile alla fotografia. Indice 1 Storia 2 Lista dei fotorealisti 3 Note 4 Voci correlate 5 Altri progetti Storia | Il fotorealismo è un movimento che nasce negli Stati Uniti d'America alla fine degli anni sessanta [1] sulla scia della Pop Art [2] [3] [4] , e insieme condividono il carattere reazionario verso la travolgente ascesa dei media, che alla metà del ventesimo secolo si trasforma in un fenomeno di massa talmente imponente da minacciare il valore dell'immagine nell'arte. [5] [6] Ne consegue così che, colto il gesto d'inizio che fu della Pop Art, i fotorealisti aprono ad un ...
          Read more

          Sidney Franklin

          Image
          Questa voce sull'argomento registi statunitensi è solo un abbozzo . Contribuisci a migliorarla secondo le convenzioni di Wikipedia. Sidney Franklin, foto di Carl Van Vechten Oscar alla memoria Irving G. Thalberg 1943 Sidney Franklin , all'anagrafe Sidney Arnold Franklin , (San Francisco, 21 marzo 1893 – Santa Monica, 18 maggio 1972), è stato un regista, produttore cinematografico e attore statunitense. Il 20 giugno 1963, si sposò con l'attrice australiana Enid Bennett. Il matrimonio durò fino alla morte dell'attrice, il 14 maggio 1969 [1] Indice 1 Filmografia 1.1 Regista 1.2 Aiuto regia (parziale) 1.3 Produttore 1.4 Attore (parziale) 2 Note 3 Altri progetti 4 Collegamenti esterni Filmografia | Regista | The Baby , co-regia Chester M. Franklin (1915) The Rivals , co-regia Chester M. Franklin (1915) Little Dick's First Case , co-regia Chester M. Franklin (1915) Her Filmland Hero , co-...
          Read more