Google reCAPTCHA
Ranked 2 of 6 captcha services by recommenders
Site owners use it to stop much bot traffic while often passing humans invisibly. Common caveat: privacy tools and non-Chromium browsers trigger repeated challenges.
Site owners use it to stop much bot traffic while often passing humans invisibly. Common caveat: privacy tools and non-Chromium browsers trigger repeated challenges.
173 people gave an opinion
- recommend it
- 15
- criticize it
- 158
- approval share
- 9%
Recommended in 7 of 13 months
- November 2025: recommended
- December 2025: not recommended
- January 2026: recommended
- February 2026: not recommended
- March 2026: not recommended
- April 2026: recommended
- May 2026: recommended
- June 2026: recommended
- July 2026: recommended
- August 2026: not recommended
- September 2026: recommended
- October 2026: not recommended
- November 2026: not recommended (month in progress)
Why it doesn’t carry the badge
- 15 people recommend itNeeds 10 or more, met.
- 0 recommenders for every criticNeeds 2 to 1 or better, not met.
- Recommended in 7 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Blocks most bots and headless browsers
“It still works, bots can solve it but it probably increases the cost of that web call by 10x or 100x”
Comment from 8 Sep 2026 in “Ask HN: Are others seeing Google's reCAPTCHA rejecting Firefox users?” “we fell back to recaptcha. Fraud rates were 100x higher in those minutes-to-hours outages.”
Comment from 1 Jun 2026 in “Cloudflare Turnstile requiring fingerprintable WebGL” “it still gets spam sent through it (though vastly less)”
Comment from 8 Jan 2026 in “Ask HN: Is it time for HN to implement a form of captcha?” - Comment from 13 Apr 2026 in “Ask HN: What's your experience with PoW captchas against form spam?”
Widely used, no reason to switch
“Looks like `archive.is` is currently using reCaptcha.”
Comment from 6 Nov 2025 in “FBI tries to unmask owner of archive.is” “there wasn't really a compelling reason to switch”
Comment from 9 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users” Seen as solving human verification
“benefits the wider population of the internet to the extent that everybody can use them”
Comment from 26 Sep 2026 in “CAPTCHAs don't prove you're human – they prove you're American (2017)” “seems like a good solution to the problem of human verification”
Comment from 29 Jun 2026 in “Google's New reCAPTCHA Wants Your Camera Access and 21 Points of Your Hand”
What people warn about
Each mark is one comment
Repeated failed or endless challenges
“even after solving the recaptcha it just wont accept and after multiple attemots even if it accepts it just goes on to display it all over again”
Comment from 8 Sep 2026 in “Ask HN: Are others seeing Google's reCAPTCHA rejecting Firefox users?” “Sometimes they've already decided you might be a bot, so they'll decide to claim you failed the first several rounds no matter what.”
Comment from 4 Jun 2026 in “Age verification for social media, the beginning of the end for a free internet?” “With recaptcha it can take me much longer than 5 seconds, and lately I have trouble even completing their challenges correctly.”
Comment from 11 Jul 2026 in “An Update on the scraper situation” - Comment from 10 Nov 2025 in “Benchmarking leading AI agents against Google reCAPTCHA v2”
- Comment from 21 Jun 2026 in “Temporary Cloudflare Accounts for AI Agents”
- Comment from 29 Mar 2026 in “ChatGPT Won't Let You Type Until Cloudflare Reads Your React State”
- Comment from 7 May 2026 in “Google Cloud fraud defense, the next evolution of reCAPTCHA”
Blocks non-Chromium and tracking-blocked browsers
“if you use a non-cheomium browser and/or block tracking, you are more likely to trigger a non-invisible prompt”
Comment from 9 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users” “If you make your connection too anonymous, Google's recaptcha will not let your through until you use your mobile phone to prove your humanity”
Comment from 11 Jul 2026 in “AI 2040 and the Cult of Intelligence” Requires Google Play or iOS devices
“Google is using its market power (as the provider of reCAPTCHA) to actively prevent devices that don’t use Google Play Services from competing effectively.”
Comment from 8 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users” “you will need a modern Android device with Google Play Services installed or a modern iPhone/iPad to be allowed to browse the web”
Comment from 6 May 2026 in “Google Cloud fraud defense, the next evolution of reCAPTCHA” “it's Google's second attempt at device attestation (ie. the widely panned web integrity tech they're trying to push through)”
Comment from 3 Jun 2026 in “He Blew the Whistle on DOGE. Then His Brakes Were Cut” - Comment from 3 Jun 2026 in “He Blew the Whistle on DOGE. Then His Brakes Were Cut”
Privacy concerns about Google data use
“while Google is definitely malicious, I don't think every site using recaptcha is and if we expect them not to use that tool there should probably be an alternative”
Comment from 8 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users” “Your data is private[ly] and secure[ly stored in plain text on our servers so that it's only accessed by us and shared with the advertising partners we choose].”
Comment from 9 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users” “but really designed to train models to do exactly what it's trying to prevent them from doing. and making life hell for the humans along the way”
Comment from 8 May 2026 in “Google Cloud Fraud Defence is just WEI repackaged”
Other captcha services people recommend
The four most recommended other captcha services, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
| Product | Recommend | Criticize | Approval | Months | Owned | Badge |
|---|---|---|---|---|---|---|
| Cloudflare Turnstile | 33 | 86 | 28% | 10 | — | — |
| Google reCAPTCHAThis page | 15 | 158 | 9% | 7 | — | — |
| hCaptcha | 6 | 10 | 38% | 4 | — | — |
| Cloudflare CAPTCHA | 6 | 22 | 21% | 4 | — | — |
| Google Cloud fraud defense | 6 | 54 | 10% | 1 | — | — |
What people said
40 of the 202 comments that mention it, newest first. Each links to the original comment.
“benefits the wider population of the internet to the extent that everybody can use them”
“It still works, bots can solve it but it probably increases the cost of that web call by 10x or 100x”
“even after solving the recaptcha it just wont accept and after multiple attemots even if it accepts it just goes on to display it all over again”
“Google dropped it on them and they are at least temporarily stuck with it”
“Google has reduced the free tier limit for reCAPTCHA v3 from 1 million down to 10,000 assessments per month”
“It’s absurd, but these nominally-security tools frequently genuinely train users to become susceptible to attacks.”
“If you make your connection too anonymous, Google's recaptcha will not let your through until you use your mobile phone to prove your humanity”
“With recaptcha it can take me much longer than 5 seconds, and lately I have trouble even completing their challenges correctly.”
“It's the easiest captcha to solve automatically, with many extensions available.”
“they had to solve like 3 round of reCAPTCHAs to finally be able to... get into a fb login page over again”
“That does heavily restrict what websites a browser can access.”
“It might force me to solve several of them, but it eventually lets me pass.”
“seems like a good solution to the problem of human verification”
“I have a 100% failure rate on. If Google decide to serve me 15 of those in a row, I will invariably fail 15 times”
“Recaptcha suffered from its own success eventually, having to ask people to read nearly impossible things”
“Sometimes they've already decided you might be a bot, so they'll decide to claim you failed the first several rounds no matter what.”
“it's Google's second attempt at device attestation (ie. the widely panned web integrity tech they're trying to push through)”
“only a certified device can approve it, meaning this takes away any open-source platform to prove you're a human”
“we fell back to recaptcha. Fraud rates were 100x higher in those minutes-to-hours outages.”
“if you use a non-cheomium browser and/or block tracking, you are more likely to trigger a non-invisible prompt”
“there wasn't really a compelling reason to switch”
“Your data is private[ly] and secure[ly stored in plain text on our servers so that it's only accessed by us and shared with the advertising partners we choose].”
“pressing the audio challenge button will just give you an error saying "To protect our users, we can't process your request right now"”
“The new reCAPTCHA on desktop shows you a QR code for you to scan with your Google-approved phone to prove you have one.”
“reCAPTCHA is completely invisible for most human visitors because they are allowed to pass just by fingerprint.”
“while Google is definitely malicious, I don't think every site using recaptcha is and if we expect them not to use that tool there should probably be an alternative”
“Google is using its market power (as the provider of reCAPTCHA) to actively prevent devices that don’t use Google Play Services from competing effectively.”
“However much I hate it, right now among the sites using reCAPTCHA there are many that I strongly want to use.”
“but really designed to train models to do exactly what it's trying to prevent them from doing. and making life hell for the humans along the way”
“I've already trained myself to commit to giving up immediately after the second bus or traffic light or puzzle”
“The attestation will include a unique ID of the phone, so that if you get banned you have to keep buying new phones”
“when we tried to integrate their fraud signals, they were worthless, worse than the rest of the industry”
“you will need a modern Android device with Google Play Services installed or a modern iPhone/iPad to be allowed to browse the web”
“reCAPTCHA is a great success story of security through obscurity”
“will block most headless browsers but very invasive”
“Had lots of people signing up for a more complicated version on Google Cloud that they didn't need to do.”
“It'll often gaslight you and pretend you failed a captcha of identifying something as simple as fire hydrants.”
“it still gets spam sent through it (though vastly less)”
“This type of captcha is too infuriating so I always skip it until I get the ones where I'm just selecting an entire image”
“Looks like `archive.is` is currently using reCaptcha.”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.