The CAPTCHA alternative built for humans.
Replacing a CAPTCHA or starting from scratch?
Server-authoritative
Policy is enforced by the server, not browser markup.
Single-use
Short-lived responses are consumed once.
Origin-bound
Origins, hostnames, and actions are verified.
Three ways to verify.
Checkbox
A familiar control the visitor activates explicitly.
Non-interactive
Visible verification without requiring a click.
Invisible
Verification triggered by your application flow.
Private and accessible by design.
Keyboard accessibleScreen-reader friendlyReduced-motion awareLocalization readyResponsive widgetNo stable cross-site visitor ID
HumanPass Privacy Addendum WCAG 2.2 AAInternationalization (i18n)RTL support