Feature RequestDashboard & UXImplemented

Upgrade reCAPTCHA to Google reCAPTCHA v3 (or Cloudflare Turnstile)

Zap-Hosting is currently using Google reCAPTCHA v2, which has become outdated and less secure compared to modern options. Upgrading the CAPTCHA system will improve security, user experience, and bot protection across the entire platform. Recommended Upgrade OptionsOption 1: Google reCAPTCHA v3Completely invisible (no user interaction needed) Works silently in the background by checking risk scores Much better at detecting bots and suspicious behaviour Perfect for login pages, signup pages, and checkout forms Provides analytics for monitoring suspicious activity Benefits: Better security No customer frustration Faster login experience Modern and clean implementation Option 2: Cloudflare Turnstile (Modern CAPTCHA Alternative)Free for everyone (even without Cloudflare hosting) No Google tracking — privacy friendly Very fast and extremely lightweight Invisible mode available Used by many major websites as a drop-in replacement Benefits: Faster than reCAPTCHA More modern & privacy-focused No need for image challenges or interaction Reduces login friction dramatically Benefits to Zap-HostingStronger protection against bots, fraud, and brute-force attacks Better user experience → fewer login complaints Trusted modern security infrastructure Less server load due to more efficient checks Future-proofing the authentication system Improves accessibility for global users and regions where reCAPTCHA v2 is slow

Originally posted by WorkforCoconut on our previous feedback board.

Ffeaturebase-import25 Nov 2025

Comments (5)

ZAP

Official response

11 Dec 2025, 16:46

We’re checking this out! 🔍 Our team is reviewing the details to see how it fits into our roadmap.

ZAP

Official response

29 Dec 2025, 03:30

Good news, this one made the list! 📌 We plan to release cloudflare turnstile with our new development project we are working on, once we are prepared to release it to the public it will include the captcha update as mentioned in this suggestion. Thanks again for suggesting this, we will do a site wide announcement once we are ready to release/publish our internal project we have been working on, this will include the main suggestion here in it.

featurebase-import11 Feb 2026, 13:53

Sure, the used one now is very frustrating..!

Originally posted by Khatabahmed on our previous feedback board.

featurebase-import17 Jun 2026, 15:00

If I may give my own opinion on it, I’d be against both of these CAPTCHA providers. reCAPTCHA v3 is rolling out device attestation, requiring users to have a Google-verified device to be able to complete the captcha. Which wouldn’t just be terrible for privacy, but also make customers without such a device (like myself) be unable to access their entire account. -> https://www.androidauthority.com/google-recaptcha-play-services-requirement-3664806/ -> https://cybernews.com/privacy/google-qr-code-recaptcha-requires-approved-phone/ -> https://www.timesnownews.com/technology-science/scan-this-qr-on-your-phone-or-get-blocked-googles-new-captcha-explained-article-154292112 Turnstile also wouldn't be ideal, in my personal opinion, as they now block everyone who spoofs WebGL or uses an “uncommon device”, which even hits users of Firefox with ResistFingerprinting enabled or just any Safari and other WebKit-based browser. Therefore, enforcing the chromium monopoly even further. But it's at least better than reCAPTCHA, so that's something. -> https://hacktivis.me/articles/cloudflare-turnstile-webgl-fingerprinting -> https://community.cloudflare.com/t/turnstile-looping-on-stock-safari-ipados-26-5/929765 Why not go with a European and privacy-respecting solution like FriendlyCaptcha or EU-Captcha - or even host something like Altcha yourself? Especially FriendlyCaptcha and Altcha are battle-tested and work great for even large organizations like the EU itself, SAP, Porsche, auth0, IONOS, Birkenstock, and the Red Cross using them. I really hope you at least take this into consideration and do not go for the nuclear option of reCAPTCHA. I'd be severely disappointed and couldn't be a customer anymore - literally.

Originally posted by WilliDieEnte on our previous feedback board.

ZAP

Official response

28 Sep 2026, 17:38

ZapX uses Cloudflare Turnstile instead of the old reCAPTCHA. Marking this as completed.

Timeline

All important changes at a glance.

Official response from the ZAP team added.

From ZAP

28 Sep 2026

17:38

Feedback

Do you have another suggestion?