Captcha provider overview
Add captcha to sign-in, sign-up, and password reset.
Hanzo IAM can require a captcha before sending verification codes (sign-in, sign-up, forgot password). Add a captcha provider and attach it to your application; you can then choose when the captcha is shown.
Supported providers: Default, Cloudflare Turnstile, reCAPTCHA, hCaptcha, Alibaba Cloud Captcha, Geetest.
| Default | Cloudflare Turnstile | reCAPTCHA | hCaptcha | Alibaba Cloud | Geetest |
|---|---|---|---|---|---|
Add a captcha provider
- Go to Providers → Add → select the new provider.
- Set Category to Captcha and Type to the provider you want.
- Fill in the required fields (varies by provider) and save.
Use in an application
- Open Applications → select an application → add the captcha provider.
- Set the Provider rule for when captcha is shown:
- None — Captcha disabled (no verification).
- Dynamic — Show captcha after 5 failed login attempts.
- Always — Require captcha on every login.
- Internet-Only — Show captcha only for requests from the public internet.

:::tip For captcha, None means verification is disabled. This is different from SMS/Email providers where "None" can mean "apply to all scenarios". :::
How is this guide?
Last updated on