You have proved you are human a thousand times — clicking traffic lights, reading wobbly letters, ticking a little box. That is a CAPTCHA, and it quietly protects the accounts and sites you use every day. Our GetMyPassword team explains what a CAPTCHA is, why sites rely on them, and one dangerous fake to watch for.
What a CAPTCHA is
A CAPTCHA is a quick test designed to tell humans apart from automated bots. The name stands for a “test to tell computers and humans apart,” and that is exactly its job. By asking for something easy for a person but hard for a script, a site can let real visitors through while blocking the floods of automated traffic that cause trouble.
Why sites use them
- Blocking fake sign-ups and spam comments created by bots.
- Slowing credential stuffing — automated attempts to log in with stolen passwords.
- Stopping scrapers and ticket bots that grab content or buy up stock in seconds.
- Protecting forms like login, signup and password reset from abuse.
Beware the fake CAPTCHA trick
Scammers have learned to imitate this familiar step. A growing trick shows a fake “verify you are human” box that tells you to press a sequence of keys or paste a command to “prove” yourself — which secretly runs malware on your computer. A real CAPTCHA only ever asks you to click, type what you see or tick a box. It will never ask you to run a command, paste text into your system, or download anything.
A genuine CAPTCHA asks you to click or read — never to open a system window or paste a command. The moment a “human check” gives you instructions to run something, it is the trap, not the test.
CAPTCHAs help, strong logins protect
A CAPTCHA slows the bots that hammer login pages with stolen passwords, but it is only one layer. The real protection for your accounts is a unique password from our password generator for every site and two-factor authentication. Together they make sure that even when bots get past the gate, your accounts stay locked.
Frequently asked questions
What is a CAPTCHA in simple terms?
It is a quick test that tells humans apart from automated bots, by asking for something easy for a person but hard for a script — like reading distorted text, picking images or ticking a box. It lets real visitors through while blocking bots.
Why do websites use CAPTCHAs?
To block fake sign-ups and spam, slow credential-stuffing attacks that try stolen passwords, stop scrapers and ticket bots, and protect login, signup and password-reset forms from automated abuse.
Is a CAPTCHA that asks me to run a command safe?
No. A real CAPTCHA only asks you to click, type what you see or tick a box. One that tells you to press key combinations, paste a command or download something is a scam designed to run malware — never follow those instructions.