tags:

views:

88

answers:

3

Hello, I know it's not really a programming question but I don't know where to ask it.

Should i use a captcha in my sign up form ?

Facebook, twitter, foursquare, gowalla etc... don't use one (or not a visible one). Is there an invisible catpcha on theses sites ?

Thank you

UPDATE : I have found a nice article about it : http://www.smashingmagazine.com/2008/07/08/web-form-design-patterns-sign-up-forms-part-2/ Thanks for your answers

+1  A: 

I don't use a captcha for SingingEels, but I do require a valid email address. Users have to confirm their email address by clicking a link sent with a GUID upon creating a new account.

That validates a real human, and also prevents quick sign-ups for spam comments.

Timothy Khouri
Does it validate a real *human*, not just a real *mailbox*?
Jørn Schou-Rode
It does so better than a captcha... unless someone spent the time creating a program that would parse 'SingingEels' emails and open a browser window and navigate to the URL... but there are more captcha hacking programs than Eels sign-up hacking programs thus far :P
Timothy Khouri
If you do not worry about bad guys targeting your specific website, adding a simple question to the signup form (eg. 2+2) should be as effective as e-mail validation, while being less troublesome for the users.
Jørn Schou-Rode
+1  A: 

No sense, because sign-up process uses e-mail verification process. It is necessary for a form that does not check user's e-mail (login) existance, for example see this, to avoid spam. Google, for example, displays captcha when you many times input wrong login+password.

igor
+1  A: 

Preferably not as they are not user friendly! Most of the CAPTCHA's have been broken anyway ( see PWNtcha )

Security shouldn't be intrusive, and there are far better ways of validating who's browsing your site. Have a look at www.atlbl.com for an API to detect botnets, web spammers, etc etc.