Hacker ApprovedDepartments

Google reCAPTCHA

Ranked 2 of 6 captcha services by recommenders

Site owners use it to stop much bot traffic while often passing humans invisibly. Common caveat: privacy tools and non-Chromium browsers trigger repeated challenges.

Site owners use it to stop much bot traffic while often passing humans invisibly. Common caveat: privacy tools and non-Chromium browsers trigger repeated challenges.

173 people gave an opinion

recommend it
15
criticize it
158
approval share
9%
Each figure is 2 people. RecommendsCriticizes

Recommended in 7 of 13 months

  1. November 2025: recommended
  2. December 2025: not recommended
  3. January 2026: recommended
  4. February 2026: not recommended
  5. March 2026: not recommended
  6. April 2026: recommended
  7. May 2026: recommended
  8. June 2026: recommended
  9. July 2026: recommended
  10. August 2026: not recommended
  11. September 2026: recommended
  12. October 2026: not recommended
  13. November 2026: not recommended (month in progress)

Why it doesn’t carry the badge

  • 15 people recommend itNeeds 10 or more, met.
  • 0 recommenders for every criticNeeds 2 to 1 or better, not met.
  • Recommended in 7 of 13 monthsNeeds 4 or more, met.

The same three rules apply to every product, and the badge can’t be bought. How the badge works

What people say about it

The reasons people give, with the number of comments that give each one. Open a reason to read what they said.

Why people recommend it

Each mark is one comment

  • Blocks most bots and headless browsers

    “It still works, bots can solve it but it probably increases the cost of that web call by 10x or 100x”

    Comment from 8 Sep 2026 in “Ask HN: Are others seeing Google's reCAPTCHA rejecting Firefox users?”

    “we fell back to recaptcha. Fraud rates were 100x higher in those minutes-to-hours outages.”

    Comment from 1 Jun 2026 in “Cloudflare Turnstile requiring fingerprintable WebGL”

    “it still gets spam sent through it (though vastly less)”

    Comment from 8 Jan 2026 in “Ask HN: Is it time for HN to implement a form of captcha?”
  • Widely used, no reason to switch

    “Looks like `archive.is` is currently using reCaptcha.”

    Comment from 6 Nov 2025 in “FBI tries to unmask owner of archive.is”

    “there wasn't really a compelling reason to switch”

    Comment from 9 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users”
  • Seen as solving human verification

    “benefits the wider population of the internet to the extent that everybody can use them”

    Comment from 26 Sep 2026 in “CAPTCHAs don't prove you're human – they prove you're American (2017)”

    “seems like a good solution to the problem of human verification”

    Comment from 29 Jun 2026 in “Google's New reCAPTCHA Wants Your Camera Access and 21 Points of Your Hand”

What people warn about

Each mark is one comment

  • Repeated failed or endless challenges

    “even after solving the recaptcha it just wont accept and after multiple attemots even if it accepts it just goes on to display it all over again”

    Comment from 8 Sep 2026 in “Ask HN: Are others seeing Google's reCAPTCHA rejecting Firefox users?”

    “Sometimes they've already decided you might be a bot, so they'll decide to claim you failed the first several rounds no matter what.”

    Comment from 4 Jun 2026 in “Age verification for social media, the beginning of the end for a free internet?”

    “With recaptcha it can take me much longer than 5 seconds, and lately I have trouble even completing their challenges correctly.”

    Comment from 11 Jul 2026 in “An Update on the scraper situation”
  • Blocks non-Chromium and tracking-blocked browsers

    “if you use a non-cheomium browser and/or block tracking, you are more likely to trigger a non-invisible prompt”

    Comment from 9 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users”

    “If you make your connection too anonymous, Google's recaptcha will not let your through until you use your mobile phone to prove your humanity”

    Comment from 11 Jul 2026 in “AI 2040 and the Cult of Intelligence”
  • Requires Google Play or iOS devices

    “Google is using its market power (as the provider of reCAPTCHA) to actively prevent devices that don’t use Google Play Services from competing effectively.”

    Comment from 8 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users”

    “you will need a modern Android device with Google Play Services installed or a modern iPhone/iPad to be allowed to browse the web”

    Comment from 6 May 2026 in “Google Cloud fraud defense, the next evolution of reCAPTCHA”

    “it's Google's second attempt at device attestation (ie. the widely panned web integrity tech they're trying to push through)”

    Comment from 3 Jun 2026 in “He Blew the Whistle on DOGE. Then His Brakes Were Cut”
  • Privacy concerns about Google data use

    “while Google is definitely malicious, I don't think every site using recaptcha is and if we expect them not to use that tool there should probably be an alternative”

    Comment from 8 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users”

    “Your data is private[ly] and secure[ly stored in plain text on our servers so that it's only accessed by us and shared with the advertising partners we choose].”

    Comment from 9 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users”

    “but really designed to train models to do exactly what it's trying to prevent them from doing. and making life hell for the humans along the way”

    Comment from 8 May 2026 in “Google Cloud Fraud Defence is just WEI repackaged”

Other captcha services people recommend

The four most recommended other captcha services, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.

Google reCAPTCHA compared with 4 alternatives
ProductRecommendCriticizeApprovalMonthsOwnedBadge
Cloudflare Turnstile338628%10——
Google reCAPTCHAThis page151589%7——
hCaptcha61038%4——
Cloudflare CAPTCHA62221%4——
Google Cloud fraud defense65410%1——
See all 6 captcha services, ranked

What people said

40 of the 202 comments that mention it, newest first. Each links to the original comment.

“benefits the wider population of the internet to the extent that everybody can use them”

MixedComment from 26 Sep 2026 in “CAPTCHAs don't prove you're human – they prove you're American (2017)”

“It still works, bots can solve it but it probably increases the cost of that web call by 10x or 100x”

RecommendsComment from 8 Sep 2026 in “Ask HN: Are others seeing Google's reCAPTCHA rejecting Firefox users?”

“even after solving the recaptcha it just wont accept and after multiple attemots even if it accepts it just goes on to display it all over again”

CriticizesComment from 8 Sep 2026 in “Ask HN: Are others seeing Google's reCAPTCHA rejecting Firefox users?”

“Google dropped it on them and they are at least temporarily stuck with it”

MixedComment from 6 Sep 2026 in “Armed man attacks Ohio governor candidate Amy Acton, several injured”

“Google has reduced the free tier limit for reCAPTCHA v3 from 1 million down to 10,000 assessments per month”

CriticizesComment from 2 Sep 2026 in “Using Cloudflare Workers and reCAPTCHA v3 for a Static Site Contact Form”

“It’s absurd, but these nominally-security tools frequently genuinely train users to become susceptible to attacks.”

CriticizesComment from 28 Jul 2026 in “Ask HN: Crooked Timber showed showed me a virus captcha, What now?”

“If you make your connection too anonymous, Google's recaptcha will not let your through until you use your mobile phone to prove your humanity”

CriticizesComment from 11 Jul 2026 in “AI 2040 and the Cult of Intelligence”

“With recaptcha it can take me much longer than 5 seconds, and lately I have trouble even completing their challenges correctly.”

CriticizesComment from 11 Jul 2026 in “An Update on the scraper situation”

“It's the easiest captcha to solve automatically, with many extensions available.”

RecommendsComment from 9 Jul 2026 in “Stop Using reCAPTCHA – It's Not a Real Captcha”

“they had to solve like 3 round of reCAPTCHAs to finally be able to... get into a fb login page over again”

CriticizesComment from 9 Jul 2026 in “Stop Using reCAPTCHA – It's Not a Real Captcha”

“That does heavily restrict what websites a browser can access.”

MixedComment from 2 Jul 2026 in “A new Android malware from Google”

“It might force me to solve several of them, but it eventually lets me pass.”

MixedComment from 1 Jul 2026 in “Google's New reCAPTCHA Wants Your Camera Access and 21 Points of Your Hand”

“seems like a good solution to the problem of human verification”

RecommendsComment from 29 Jun 2026 in “Google's New reCAPTCHA Wants Your Camera Access and 21 Points of Your Hand”

“I have a 100% failure rate on. If Google decide to serve me 15 of those in a row, I will invariably fail 15 times”

CriticizesComment from 21 Jun 2026 in “Temporary Cloudflare Accounts for AI Agents”

“Recaptcha suffered from its own success eventually, having to ask people to read nearly impossible things”

CriticizesComment from 18 Jun 2026 in “I Hate Compilers”

“Sometimes they've already decided you might be a bot, so they'll decide to claim you failed the first several rounds no matter what.”

CriticizesComment from 4 Jun 2026 in “Age verification for social media, the beginning of the end for a free internet?”

“it's Google's second attempt at device attestation (ie. the widely panned web integrity tech they're trying to push through)”

CriticizesComment from 3 Jun 2026 in “He Blew the Whistle on DOGE. Then His Brakes Were Cut”

“only a certified device can approve it, meaning this takes away any open-source platform to prove you're a human”

CriticizesComment from 3 Jun 2026 in “He Blew the Whistle on DOGE. Then His Brakes Were Cut”

“we fell back to recaptcha. Fraud rates were 100x higher in those minutes-to-hours outages.”

MixedComment from 1 Jun 2026 in “Cloudflare Turnstile requiring fingerprintable WebGL”

“if you use a non-cheomium browser and/or block tracking, you are more likely to trigger a non-invisible prompt”

MixedComment from 9 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users”

“there wasn't really a compelling reason to switch”

RecommendsComment from 9 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users”

“Your data is private[ly] and secure[ly stored in plain text on our servers so that it's only accessed by us and shared with the advertising partners we choose].”

CriticizesComment from 9 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users”

“pressing the audio challenge button will just give you an error saying "To protect our users, we can't process your request right now"”

CriticizesComment from 9 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users”

“The new reCAPTCHA on desktop shows you a QR code for you to scan with your Google-approved phone to prove you have one.”

CriticizesComment from 9 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users”

“reCAPTCHA is completely invisible for most human visitors because they are allowed to pass just by fingerprint.”

RecommendsComment from 9 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users”

“while Google is definitely malicious, I don't think every site using recaptcha is and if we expect them not to use that tool there should probably be an alternative”

CriticizesComment from 8 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users”

“Google is using its market power (as the provider of reCAPTCHA) to actively prevent devices that don’t use Google Play Services from competing effectively.”

CriticizesComment from 8 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users”

“However much I hate it, right now among the sites using reCAPTCHA there are many that I strongly want to use.”

CriticizesComment from 8 May 2026 in “Google Broke reCAPTCHA for De-Googled Android Users”

“but really designed to train models to do exactly what it's trying to prevent them from doing. and making life hell for the humans along the way”

CriticizesComment from 8 May 2026 in “Google Cloud Fraud Defence is just WEI repackaged”

“I've already trained myself to commit to giving up immediately after the second bus or traffic light or puzzle”

CriticizesComment from 7 May 2026 in “Google Cloud fraud defense, the next evolution of reCAPTCHA”

“The attestation will include a unique ID of the phone, so that if you get banned you have to keep buying new phones”

CriticizesComment from 6 May 2026 in “Google Cloud fraud defense, the next evolution of reCAPTCHA”

“when we tried to integrate their fraud signals, they were worthless, worse than the rest of the industry”

CriticizesComment from 6 May 2026 in “Google Cloud fraud defense, the next evolution of reCAPTCHA”

“you will need a modern Android device with Google Play Services installed or a modern iPhone/iPad to be allowed to browse the web”

CriticizesComment from 6 May 2026 in “Google Cloud fraud defense, the next evolution of reCAPTCHA”

“reCAPTCHA is a great success story of security through obscurity”

RecommendsComment from 3 May 2026 in “Security Through Obscurity Is Not Bad”

“will block most headless browsers but very invasive”

MixedComment from 13 Apr 2026 in “Ask HN: What's your experience with PoW captchas against form spam?”

“Had lots of people signing up for a more complicated version on Google Cloud that they didn't need to do.”

CriticizesComment from 10 Apr 2026 in “Microsoft suspends dev accounts for high-profile open source projects”

“It'll often gaslight you and pretend you failed a captcha of identifying something as simple as fire hydrants.”

CriticizesComment from 29 Mar 2026 in “ChatGPT Won't Let You Type Until Cloudflare Reads Your React State”

“it still gets spam sent through it (though vastly less)”

MixedComment from 8 Jan 2026 in “Ask HN: Is it time for HN to implement a form of captcha?”

“This type of captcha is too infuriating so I always skip it until I get the ones where I'm just selecting an entire image”

CriticizesComment from 10 Nov 2025 in “Benchmarking leading AI agents against Google reCAPTCHA v2”

“Looks like `archive.is` is currently using reCaptcha.”

MixedComment from 6 Nov 2025 in “FBI tries to unmask owner of archive.is”

Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.