A better way to verify → Meet TapHuman
Human verification, rethought

Stop bots.
Delight humans.

Replace frustrating image grids with playable microgames. Secure your endpoints with a verification surface that users actually enjoy.

The problem

Security shouldn't feel like a dead end.

For a decade, human verification has meant finding traffic lights or deciphering blurry text. It's a high-friction roadblock that damages conversion rates and frustrates genuine users.

We believe that proving you're human should be as simple and natural as playing a quick game. TapHuman replaces annoyance with delight, while maintaining rigorous server-side cryptographic validation.

A better default

Built for the moment
between trust and access.

01 / HUMAN FIRST

Make verification a tiny win.

Small moments of play trigger positive reinforcement. Instead of a chore, verification becomes a brief, satisfying interaction.

02 / PRIVATE

No image harvesting.

We verify humanity through interaction patterns, not by using your visitors to label datasets.

03 / ACCESSIBLE

Everyone gets through.

A built-in keyboard bypass supports WCAG 2.1 AA alignment — no audio CAPTCHA required (formal audit pending).

How it works

Four steps. Zero guesswork.

A frictionless flow from client to edge to your server. Fast, verifiable, and extremely difficult to automate.

01

Your visitor arrives

The client requests a signed challenge token from the API.

02

A game appears

A microgame renders instantly in the iframe.

03

They make a move

The user completes the objective. The SDK signs the result.

04

Your server verifies

You validate the HMAC-SHA256 signature. Done.

2–5s
Average verification time
Most
Bot traffic blocked at the server
Very low
False positive rate on accessible bypass
Comparison

Confident enough to show you the scorecard.

See all 8 comparisons
FeatureTapHumanreCAPTCHATurnstilehCaptcha
Playful UX
No consent banner
WCAG 2.1 AA
No image grids
Custom branding
Cryptographic proof

Showing top 3 competitors. Full comparison includes Arkose Labs, Friendly Captcha, and ALTCHA.

See full comparison →
For developers

An iframe and four lines on your server.

No npm package required. Embed the widget as an iframe, listen for the oops_captcha_solved postMessage, then verify the HMAC-SHA256 signature server-side.

Read the full docs →
<iframe
  src="https://conversion.business/sunny-day-maze/?mode=captcha
       &clientId=pk_YOUR_PUBLIC_KEY"
  height="420"
  style="border:none; border-radius:12px;"
  allow="autoplay"
></iframe>
Privacy by design

Proof, not personal data.

TapHuman determines humanity through gameplay and interaction patterns. We don't read cookies, track IPs across domains, or build advertising profiles on your visitors.

Accessibility by default

Verification that meets people where they are.

The Accessible Behavioral Bypass Gateway provides a keyboard-based verification path designed to support WCAG 2.1 AA (formal audit pending). No audio puzzle. No image alternative. Just three keystrokes.

Questions, answered

Good to know.

Your next verification moment

Make the right kind
of interruption.

Stop settling for frustrated users and abandoned checkouts. Build something people actually don't mind clicking.

Talk to the team →