Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.


macrumors bot
Original poster
Apr 12, 2001

iOS 16 has a new Automatic Verification feature that can bypass CAPTCHA prompts by automatically and privately verifying a user's device and Apple ID account via iCloud. The feature is designed to eliminate the need to tap on images of traffic lights or decipher squiggly text to prove that you are a real human being and not a robot.


Automatic Verification is limited to websites and apps that support Private Access Tokens, but adoption of the feature should get a big boost thanks to Cloudflare, which today announced that it is making a free API called Turnstile available to any website looking to eliminate CAPTCHAs — even if the website is not a Cloudflare customer.

Cloudflare explained how the technology works in a blog post:
Private Access Tokens are built directly into Turnstile. While Turnstile has to look at some session data (like headers, user agent, and browser characteristics) to validate users without challenging them, Private Access Tokens allow us to minimize data collection by asking Apple to validate the device for us. In addition, Turnstile never looks for cookies (like a login cookie), or uses cookies to collect or store information of any kind. Cloudflare has a long track record of investing in user privacy, which we will continue with Turnstile.
Turnstile is available in beta starting today via the Cloudflare dashboard or a sign-up form. As websites begin to adopt Turnstile, the prevalence of annoying CAPTCHAs across websites and apps will decrease over time.

Automatic Verification is enabled by default on iPhones running iOS 16 and can be found in the Settings app under Apple ID → Password & Security → Automatic Verification. The feature is also supported on iPadOS 16.1 and macOS Ventura, which both remain in beta testing and will be released in October, according to Apple.

(Thanks, Scott Buscemi!)

Article Link: iOS 16 Feature for Bypassing CAPTCHAs Will Soon Work With Many More Websites
Last edited:


macrumors 604
May 20, 2010
Don't mind the letters or easier to find things. But some the items so hidden like it's Where's Waldo. I've seen some so easy that you knew the company though it was stupid. It was a pic one zoomed in fire hydrant with find fire hydrants


macrumors 601
Jun 9, 2021
Why would you not count it? It is clearly part of the vehicle.

It’s part, but not clearly. I’ve not clicked that bit and it always lets me through. I think a computer would notice it but a human might not.

I don’t know, I’m no expert and clearly this is more art than science. The main goal seems to just teaching Google self driving cars.

So maybe it should count. Now I don’t know. Probably works either way.


macrumors 6502a
Jun 28, 2002
So... it's a bot that can bypass CAPTCHA, authenticate as a human and prove its not a... bot...
Maybe that poor Google engineer was onto something after all!

In all seriousness though let's roll this out across the web/on the desktop. It's long past time for CAPTCHA to die.
(I don't even care if it's an imperfect solution, CAPTCHA is honestly worse than nothing at all. It annoys and harms actual users while doing very little, if anything, to deter dedicated botters with even moderate expertise and means at their disposal)
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.