As an industry, we accepted it’s normal to slap a 300x65 pixel banner with another company’s logo + links on our websites. Sign-up and login pages are prime real estate on the web. They are the entry door for all of our users every single day. We should be able to achieve bot detection without sacrificing user experience. No compromise. For those saying “you can just enable invisible mode”, here are the problems we faced: 1) Race conditions with password managers If your page or form submits before Turnstile has finished processing, the token may be missing. So, then you may need to delay form submission, which is not ideal for the user. This is especially annoying if you’re using a password manager which will autofill every field. 2) Adblockers and VPNs If you’re using an adblocker or VPN, sometimes the widget doesn’t render or execute, and no challenge/token is issued. The majority of our users use some sort of adblocker. If they don’t have an adblocker extension installed, they might use a modern browser that already comes with it. 3) Mobile UX issues On mobile networks or low-performance devices, background checks sometimes time out. The challenge gets rejected or the user needs to repeat form submission. — These are things we saw at Resend while serving 500k users. If Turnslite is working for you, then you can keep using it. This was not the case for us, and it’s not the type of friction we want users to have. Maybe BotID will solve this problem. Maybe it won’t. We will see. The only thing that matters to me is not compromising on user experience.
We removed Cloudflare's Turnstile for... - Cleaner UI ✨ - Login is 2x as fast! 🏎️
