Human check

Human check protects forms such as sign-up, contact or comment forms. In the visitor's browser it looks for signs of automation and does a moment of proof-of-work. Ordinary visitors pass without noticing; suspicious browsers tick a box first; automated browsers are refused. Your server then confirms the result. No puzzles, no tracking cookies.

Create a site

Under Human check, create a site and list the domains it may run on. You get a public site key for your page and a secret for your server (shown once).

Add it to a form

<script src="https://randallflare.com/api/human-check/v1/api.js" async defer></script>

<form action="/signup" method="post">
  <!-- your fields -->
  <div class="rf-human-check" data-sitekey="rk_…"></div>
  <button type="submit">Sign up</button>
</form>

When the check passes, a hidden field rf-human-check-response holds a token that is sent with the form. Optional attributes: data-callback, data-expired-callback, (names of global functions) and (, or ). For pages that render later, call ; , and are also available.