You are viewing a single comment's thread from:
RE: My Experience: Biggest Barrier to 'Signing up Friends'
I'm not particularly technical, but would reCAPTCHA be a way of mitigating hacking risk? Does this prevent brut force password hacks?
It seems crazy that this issue is turning away potential community members. There must be ab better way...
I believe that the point in reCAPTURE is to make it more difficult for bots to complete the log in process - to prevent lots of spam accounts being created or perhaps to slow down a brute force attack.
The problem is that authenticating doesn't necessarily have to happen through this web page - it wouodn't stop a bot that went via an API.
Although, you could perhaps add layers of security like locking an account after 5 failed attempts to authenticate or two factor authentication for some actions.