northdan.
Vezi pagina în română

IT Glossary

What is a CAPTCHA?

The prove-you-are-not-a-robot test on forms — the filter that stops automated spam before it fills your inbox.

If your contact form delivers daily offers of SEO services and messages full of suspicious links, you have already met the problem CAPTCHA solves: bots that fill in any form they find on the internet. The test — from the classic distorted letters and traffic-light grids to modern invisible checks — separates humans from scripts before the message is sent. Current versions such as reCAPTCHA v3 and Cloudflare Turnstile have learned the commercial lesson: they analyse behaviour in the background and ask nothing at all of most users, because every puzzle handed to a genuine customer costs conversions. For your site, the right balance is invisible protection plus complementary measures such as honeypot fields and rate limiting, with an actual challenge shown only to suspicious traffic. And beyond a clean inbox there is a real security stake: on account and login forms, CAPTCHA slows down automated attacks using stolen password lists.

Let’s talk about your project

Message us on WhatsApp or send an email — you talk directly to a developer.

office@northdan.com · +40 752 070 247

Why it matters for your business

A clean inbox with real enquiries

Automated spam is stopped at source, so the sales team no longer sifts through rubbish looking for actual prospects.

Account attacks slowed down

Automated login attempts with stolen passwords become slow and expensive for the attacker — one more barrier alongside two-factor authentication.

Protection without losing customers

Modern invisible variants filter bots without asking genuine customers to identify fire hydrants — security with the conversion rate intact.

Frequently asked questions

Will a CAPTCHA drive customers away from my site?

The old puzzle-based ones, yes — every extra step costs conversions. Modern invisible ones check in the background and only show a challenge on suspicious behaviour. If your site still asks everyone to click on traffic lights, it is due an update.

I still get spam despite having a CAPTCHA — how?

Some spam is sent by paid humans rather than bots, and some scripts get around badly implemented checks. The answer is layering: CAPTCHA plus invisible honeypot fields, rate limiting and content filtering on submission.

Which CAPTCHA should I choose for a company website?

For most sites, reCAPTCHA v3 or Cloudflare Turnstile — both free and invisible to legitimate users. Turnstile has the advantage of not involving Google's tracking ecosystem, which is a point in its favour for GDPR documentation.