Home

/

Glossary

/

Browser

/

CAPTCHA

Browser

3 min read

What is CAPTCHA?

CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) is a challenge-response mechanism designed to distinguish human users from automated bots on websites.

What is a CAPTCHA?

CAPTCHA stands for Completely Automated Public Turing test to tell Computers and Humans Apart. It is a security mechanism that websites use to verify that a user is human rather than an automated bot. CAPTCHAs present challenges that are easy for humans to solve but difficult for machines, such as identifying distorted text, selecting images containing specific objects, or solving simple puzzles.

Types of CAPTCHAs

CAPTCHAs have evolved significantly since their introduction:

  • Text-based CAPTCHAs: Distorted letters and numbers that users must type correctly. Increasingly rare due to advances in OCR technology.
  • Image-based CAPTCHAs: Tasks like "select all images with traffic lights" that require visual understanding.
  • reCAPTCHA v2: Google's checkbox ("I'm not a robot") that analyzes mouse movement and browsing behavior.
  • reCAPTCHA v3: Invisible scoring system that rates user interactions on a 0-to-1 scale without presenting a visible challenge.
  • hCaptcha: A privacy-focused alternative that uses image classification tasks.
  • Audio CAPTCHAs: Accessibility alternatives that play distorted audio for users to transcribe.

    • CAPTCHAs and Browser Automation

    CAPTCHAs represent one of the most significant obstacles in browser automation. They are specifically designed to block automated access, which creates friction for legitimate automation use cases like data extraction, automated testing, and RPA workflows.

    Common approaches to handling CAPTCHAs in automation:

  • Avoidance: Structuring automation to minimize triggering CAPTCHA challenges by mimicking human browsing patterns, using realistic timing, and maintaining consistent sessions.
  • Human-in-the-loop: Pausing automation when a CAPTCHA appears and alerting a human operator to solve it before resuming.
  • API-based access: Bypassing the browser entirely by using official APIs that don't require CAPTCHA verification.
  • CAPTCHA solving services: Third-party services that use human workers or AI to solve CAPTCHAs programmatically.

    • CAPTCHA challenges aim to distinguish humans from bots, and the broader problem space is catalogued by OWASP. Autonoly navigates legitimate flows and human checkpoints using live browser control and AI vision.

    Why It Matters

    CAPTCHAs can completely block automated workflows, causing data extraction jobs to fail and business processes to stall. Understanding CAPTCHA types and mitigation strategies is essential for building reliable browser automation that operates within ethical and legal boundaries.

    How Autonoly Solves It

    Autonoly's Site Quirks system automatically detects and records CAPTCHA encounters across sessions. When the AI agent encounters a CAPTCHA, it can pause and notify the user for human-in-the-loop resolution. The platform remembers which domains use CAPTCHAs and proactively warns agents, allowing them to adjust their approach or suggest API-based alternatives.

    Learn more

    Examples

    • A web scraping job pauses when reCAPTCHA v2 appears and sends a notification for human intervention

    • Site Quirks data warns the agent that a target website uses hCaptcha, triggering a slower, more human-like browsing pattern

    • An automation workflow falls back to API-based data access after repeated CAPTCHA encounters on a website

    Frequently Asked Questions

    Modern AI can solve many CAPTCHA types, including image recognition and text-based challenges. However, CAPTCHA systems continuously evolve to stay ahead of AI capabilities. Google's reCAPTCHA v3, for example, uses behavioral analysis rather than explicit challenges, making it harder to bypass with pure AI. Ethically, automating CAPTCHA solving may violate website terms of service.

    Use realistic browsing patterns with human-like delays between actions, maintain consistent browser sessions with cookies, avoid making too many requests in rapid succession, use residential IP addresses rather than data center IPs, and ensure your browser fingerprint matches a real user's browser configuration.

    You might also like

    Blog Posts
    Use Cases
    ← Business Process AutomationCI/CD →

    Related terms, automations and guides

    Where this concept shows up in practice.

    DefinitionBot DetectionBot detection is a set of techniques websites use to identify and block automated traffic, distinguishing between human visitors and software-controlled browsers or scripts.DefinitionBrowser AutomationBrowser automation is the use of software to control a web browser programmatically, performing tasks like clicking buttons, filling forms, and extracting data without manual human interaction.DefinitionHuman-in-the-LoopHuman-in-the-loop (HITL) is a design pattern where automated systems pause at critical decision points to request human review, approval, or input before proceeding.DefinitionWeb ScrapingWeb scraping is the automated process of extracting data from websites by programmatically reading and parsing HTML content. It enables businesses to collect structured information from web pages at scale without manual copy-and-paste.DefinitionRate LimitingRate limiting is a technique that controls the number of requests a client can make to a server within a given time window, preventing abuse and ensuring fair resource distribution.DefinitionSeleniumSelenium is an open-source suite of tools for automating web browsers, widely used for testing web applications and web scraping. Its WebDriver API provides cross-browser control through a standardized protocol supported by all major browsers.DefinitionData ExtractionData extraction is the process of retrieving structured or unstructured data from various sources — websites, documents, databases, APIs, or files — and converting it into a usable format for analysis, storage, or further processing.GuideWeb Scraping Best Practices: Avoiding Blocks, Bans, and Legal IssuesA comprehensive guide to web scraping best practices. Learn how to avoid IP blocks, bypass CAPTCHAs, handle anti-bot detection systems, respect legal boundaries, and use AI agents to automate compliant data extraction at scale.

    Stop reading about automation.

    Start automating.

    Describe what you need in plain English. Autonoly's AI agent builds and runs the automation for you — no code required.

    See Features