CAPTCHA Explained: Origins, Types and Limits
Why in the news
CAPTCHA, the familiar bot-versus-human test, was in the tech spotlight in April 2025 for its role in web security and for the need to evolve.
Key facts
- Full form: Completely Automated Public Turing test to tell Computers and Humans Apart.
- Devised in the early 2000s by Luis von Ahn, Manuel Blum, Nicholas J. Hopper and John Langford to counter spam, fake accounts and data theft by bots.
- First patent in 2003, built on distorted text that people read easily but machines do not.
- Rooted in the Turing Test of Alan Turing, which checks whether a machine can imitate human behaviour.
- Typical formats: distorted text or numbers, image selection (such as picking traffic lights), audio challenges.
Evolution
| Period | Version | Feature |
|---|---|---|
| 2000s | Text CAPTCHA | Distorted characters |
| 2009 | reCAPTCHA | Scanned book words that OCR could not read were transcribed by users, helping digitise books |
| 2014 | Invisible reCAPTCHA | Judges human behaviour, for example mouse movement |
| Present | reCAPTCHA v3 | Scores user activity with no visible test |
Where it protects
- Contact forms, login and signup pages, online shopping checkouts, surveys and polls.
- Stops credential stuffing, data scraping and fake account creation; adds a layer during account recovery and payment checks.
Concerns
- Barriers for visually impaired users and people with hearing or cognitive disabilities.
- Time-consuming and irritating, especially on mobile.
- Machine learning and paid solving services let attackers bypass many tests.
Way forward
- Stronger behavioural analysis, biometric authentication and better UX design.
- Balance security, usability and inclusivity.
Exam angle
- Patent year: 2003.
- reCAPTCHA launched 2009; invisible version 2014.
- Related term: Turing Test.