Accounts

Account takeover protection

Account takeover often starts with a script trying many leaked passwords against your login form.
Proof of work makes each attempt cost computing time.

Limits

What this check does not replace.

See What is account takeover fraud? and What is credential stuffing?.

Slows scripts

A bot must finish a puzzle before your login handler runs.
Large password lists become slower and more expensive.

Keep MFA

A second factor still matters when a password is already known.
CDPCaptcha is not that factor.

Phishing is separate

A person who types a password into a fake site is not stopped by a puzzle on your real login.

Protect the login form

Add the widget to login and password reset, and keep your existing account controls.

Sign up free