@#$%! CAPTCHA

Jonah Burlingame
mind/arc
Published in
3 min readAug 8, 2011

THE WORD ON THE CURVE
I look forward to the day when we look back on the early 00’s and laugh about the ridiculous blight websites put on the user experience. I’m talking about CAPTCHA. When it first appeared I thought it was a small but maybe necessary hurdle in my path to fill out a form. Perhaps it offered some security benefit to my data? I didn’t know but I didn’t give it too much thought since I only saw it on a few conference registration forms. But now it seems CAPTCHA has become the flashing graphic of the day.

CAPTCHA stands for Completely Automated Public Turing Test To Tell Computers and Humans Apart. It is supposed to provide a simple challenge that a human can answer that a computer cannot. But as black hat technology improves and computers can read CAPTCHA the images have become increasingly complex and thus harder to decipher for humans too. One hope is that it won’t be long until the deciphering success rates are equal between bots and humans and therefore will no longer serves it’s purpose.

WHAT DOES CAPTCHA COST YOUR SITE?
It was this article from Harry Brignull (90 Percent of Everything) that prompted me to dig deeper into the issue. Harry states it clearly — “Using a CAPTCHA is a way of announcing to the world that you’ve got a spam problem”. Site designers and managers are putting the burden on the user to overcome the site’s technical problem.

In the course of my working with ecommerce managers I know how much scrutiny they put on every element on a page in the funnel that could potentially deter conversion. Why isn’t the same scrutiny placed on a registration form’s conversion? Referencing a study done on a high-traffic website Mr. Brignull shows how replacing CAPTCHA with alternate methods gave the site a 64% conversion lift. I’ve read about similar results elsewhere.

WHAT’S THE ALTERNATIVE?
Slobodan Kovacevic (Array Studios) lists some CAPTCHA alternatives here. The more favorable solutions (IMHO) use hidden fields called honeypots that wold only be seen by a bot and when filled out identify the submission as submitted by a bot. This method can be further checked against a timestamp measurement in which forms filled out in an unrealistic timeframe (seconds vs minutes) would be tagged as bots. Another creative alternative can be seen on TheyMakeApps.com requiring the user to slide an arrow from one area to another using the mouse. Imagine how something like this could be more playful and even play into the ‘gamification‘ trend.

Yes, the spammers are always only a step or two behind but clearly there are more elegant solutions to separating humans and computers.

WHERE DO YOU STAND?
Are you a UX practitioner with a story about CAPTCHA?

Originally published at www.mind-arc.com on August 8, 2011.

--

--

Jonah Burlingame
mind/arc

Digital strategist, entrepreneur and thought leader working/playing at the intersection of design and emerging technologies.