Text-based CAPTCHA
Distorted text rendered for humans and trivial for modern OCR.
View guide
Open CAPTCHA knowledge base
39 challenge types, documented with context, integration details, and responsible-use guidance.
$ captcha identify --url example.com
reCAPTCHA v3 score-based / no widget
$ captcha recommend
01 warmed browser profile
02 residential IP + real session
03 token API (paid fallback)
# verify every assumption before scaling
The library
Each entry covers a CAPTCHA format, its context, and documented approaches. Use the filters to narrow the list.
Distorted text rendered for humans and trivial for modern OCR.
View guideGoogle's checkbox and image challenge with strong browser signals.
View guideInvisible score-based scoring; no widget is shown to the visitor.
View guideEnterprise risk scoring with account-level signals and custom rules.
View guidePrivacy-friendly challenge that leans on browser and network reputation.
View guideSlide, icon and word challenges backed by adaptive risk analysis.
View guideEnforcement challenges designed to make automated solving expensive.
View guideAWS bot control with proof-of-work and browser integrity checks.
View guideDevice fingerprinting and behavioural scoring with adaptive challenges.
View guideLightweight adaptive CAPTCHA with a mostly invisible default mode.
View guideTencent's slider and click challenges tied to a Chinese risk ecosystem.
View guidePrivacy-focused image labelling with a large challenge pool.
View guideYandex's adaptive challenge with browser and behavioural signals.
View guideVK's rotating image grid with aggressive session checks.
View guideSelf-hosted proof-of-work CAPTCHA with a tiny JavaScript widget.
View guideNetEase's slider and click captcha with encrypted telemetry.
View guideChinese slider captcha with device and behaviour scoring.
View guideRisk control platform with slider and click challenges.
View guideAlibaba Cloud's slider captcha with risk-based fallbacks.
View guideAdvanced bot management with fingerprinting and occasional challenges.
View guideClient-side virtualization and telemetry built to resist automation.
View guideEnterprise bot defence with proof-of-work and behavioural checks.
View guideBot Manager sensors and adaptive challenges at the edge.
View guideDrag a piece into place while the page watches the whole gesture.
View guideClassic self-hosted text CAPTCHA with audio alternatives.
View guideThe familiar distorted-text challenge used across Amazon properties.
View guidePuzzle slider used on Binance login and registration flows.
View guideRotating image puzzle tied to device and account signals.
View guideSpoken challenges intended as an accessible alternative.
View guideOpen-source proof-of-work widget with a native server verifier.
View guidePrivacy-first proof-of-work challenge from a European provider.
View guideCommercial CAPTCHA with a self-hostable open-source core.
View guideModern privacy-focused challenge with open-source components.
View guideSmall puzzle slider that is friendly to scripted solving.
View guideSlider puzzle with server-side verification and lightweight assets.
View guideImage-based puzzle captcha with several challenge layouts.
View guideOpen-source proof-of-humanity protocol with a hosted option.
View guideRotating image and slider challenge used on Temu flows.
View guideHosted CAPTCHA widget with interactive and invisible modes.
View guideA practical field guide
Start with context and evidence, then compare documented options with their trade-offs and limits.
Browse concise profiles of CAPTCHA types, their common formats and the signals that distinguish them.
Explore documented open-source projects and service options, with practical trade-offs called out.
Use this reference for learning and authorized testing; respect privacy, site rules and applicable law.
Operating principles
The guide is built around repeatable research, not a single magic solver or a pile of affiliate links.
Every page begins with open-source libraries and practical browser methods before it mentions a paid service.
Network requests, cookies and injected scripts reveal more than the screenshot. Identify the vendor before writing code.
Use this material for education and authorised testing. Honour terms of service, rate limits and privacy.
Found a missing reference or an outdated detail? Contributions help make this knowledge base clearer and more responsible.