I currently use invisible recaptcha and it automatically shows a captcha if it thinks the user is a bot.
Now there is Recaptcha v3 and I struggle to understand how it is supposed to be used.
It returns a score, but what if the score is low which may indicate the user is a robot. Should I then show the graphical captcha by calling some function? Or should I simply pop up a dialog that captcha thinks you're a bot and that's it?
So what I don't get: what should happen if the user gets a low score? Is there a way for the user to still proceed by solving a captcha? Or is it the end of the road then and there is no way to go forward?
Does/can recaptcha v3 show graphical captchas to solve at all?
The idea is no user friction, and displaying a captcha runs contrary to that. Recall that you should put ReCaptcha v3 on all pages, not only on those you want to protect: that’s how the captcha will learn to distinguish normal from abusive behaviors. A user must be always allowed to proceed. Low scores should be used to prioritize or further qualify requests.
For example, in analytics you may want to discard bot/scraper interactions with low scores. In commerce, you want to deprioritize bot orders – don’t count them in day’s sales, put them last in the queue and require human verification on your end, or an additional verification step i.e. an email challenge. In logins, low scores would force 2nd factor verification step. And so on – your question cannot be further answered without knowing the exact use for the page you ask about.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With