iOS 16 allows you to bypass CAPTCHAs on some apps and websites

When iOS 16 comes out later this fall, you may find that you don’t have to deal with so many pesky CAPTCHAs asking you to slide a puzzle piece or distinguish between a hill and a mountain. That’s because Apple is introducing a feature for its iPhones and Macs called Automatic Verification that lets some sites know you’re not a bot without actually doing anything (through MacRumors

Apple partnered with two major content delivery networks, Fastly and Cloudflare, to develop the system. When it launches with iOS 16 and macOS Ventura, sites using any of the services to defend against spam should take advantage of the system and stop displaying so many CAPTCHAs. If you pay close attention to how many sites go offline when Fastly or Cloudflare starting to have problemsyou’ll know that this is a solid piece of the internet that can become significantly less annoying (especially for those who see CAPTCHAs more often than average because they use a VPN or clear their cookies often).

A basic diagram of how Apple’s system works.
Image: Apple

while this is far from the first attempt to ditch CAPTCHAs, Apple’s scale means we can actually see some progress this time around. The underlying system, which Apple calls Private Access Tokens, is vaguely reminiscent of its system to replace passwords† Here’s a very simplified idea of ​​how it works: Your device looks at several factors to determine if you’re human. When you go to a website that would normally ask you to fill out a CAPTCHA, that site may ask your phone or computer if a human is using it. If your device says yes, you will be let through right away.

If you want to take a deep dive into details about the technology, you can watch Apple’s WWDC session about itread Apple Insider‘s explanationand check out Fastly’s article about the.

As with most of the new technology it presents, Apple has a privacy story to go with it. The company says that while your Apple ID is used as proof that you’re a real person, your phone or computer won’t send the information (such as your email address or phone number) associated with it. All the site gets is essentially a thumbs up from Apple. Similarly, Apple only knows your device is asking to confirm if you’re human; it doesn’t get any information about who wants to know.

Fortunately for Android and Windows users, Apple is not alone in working on this technology. According to FastlyGoogle also helped develop it, and the concept of a trusted party that guarantees you’re human is built into Internet standards. Google has started building a similar system in Chrome around two years ago and while it seems to be mainly targeting third-party publishers rather than self-authenticating, I can certainly see it building a system for its users that is similar to Apple’s over time.

Leave a Comment

Your email address will not be published.