In the iOS 16 system, Apple introduced a function called automatic identity authentication (Automatic Verification), which can authenticate user devices through automation and privacy, and verify Apple ID accounts through iCloud, thereby bypassing the CAPTCHA verification method. And thanks to the latest Turnstile API launched by Cloudflare, almost any website can leverage this feature to eliminate CAPTCHA.
Automatic Verification was previously limited to websites and applications that support private access tokens. But thanks to Cloudflare’s latest Turnstile API, even customers who are not Cloudflare can eliminate CAPTCHA verification. In this way, users do not need to click on traffic lights, buses and other pictures to verify that it is a human visit.
Cloudflare explains in the blog post that
private access token is directly built into Turstile. While Turnstile has to look at some session data (such as headers, user agents, and browser features) to verify users without challenging them, private access tokens allow us to minimize data collection by requiring Apple to verify devices for us.
In addition, Turnstile never looks for cookies (such as login cookies), or uses cookie to collect or store any type of information. Cloudflare has a long track record of investing in user privacy and we will continue to use Turnstile.
Turstile Beta versions are available from today via the Cloudflare dashboard or registration form. As websites begin to adopt Turnstile, the popularity of annoying verification codes in websites and applications will decrease over time.
