// 03 / Tools / captcha
Captcha debugger.
Why does every other site ask you to "verify you are human"? This page checks the signals bot detection is known to weigh, ranks what's hurting you, and tells you how to fix it.
// Blind spots
What this page can't see.
- Your behaviour. Opening many tabs fast, reloading, scrolling or typing in unusual ways.
- Your IP's history. Providers keep their own reputation data — what other people on your IP did yesterday counts.
- Your account. Being signed in to Google noticeably lowers reCAPTCHA friction.
- Third-party cookies. Blocking them (good for privacy) removes the history that vouches for you.
- The site's own settings. Some sites simply challenge everyone, or everyone from your country.
// Shortcuts
Fewer captchas, less effort.
- Private Access Tokens. On iOS 16+ / macOS 13+ Safari, Cloudflare can verify your device without a puzzle — keep it on in Settings › Apple ID.
- Privacy Pass. A browser extension supported by Cloudflare and hCaptcha: solve once, redeem anonymous tokens later.
- hCaptcha accessibility cookie. hCaptcha offers a cookie for people who can't solve visual puzzles.
// providers don't publish their rules — impacts here are informed estimates