mCaptcha
Privacy-focused proof-of-work CAPTCHA with no tracking or puzzles
Teams that can self-host and want bot protection with no tracking, no cookies, and no puzzle friction will get the most from mCaptcha. Its one-click proof-of-work widget, tiered site keys with easy or advanced difficulty, and Docker, Ansible, and bare-metal deployment cover the everyday anti-spam need as genuinely free software. Teams that cannot run their own instance, or buyers who need independent public reviews confirming day-to-day reliability, should look at a managed hosted check instead. If you already run your own stack and can wire backend token verification, start with a self-hosted instance; if nobody on the team runs servers, pick a hosted CAPTCHA and accept its data tradeoff.[1][2][3][4]
Good fit. One-click proof-of-work verification removes the abandonment and frustration of image-labeling challenges on logins, registrations, and contact forms.[1][2]
Keep in mind. Everything depends on an operator-run server: the demo instance is explicitly not for serious use, so there is no managed route for teams without server capacity.[1][2]
Repository review signals: unknown status, stale · Observed October 11, 2026.
Sources and editorial review
Source research. Reviewed on October 11, 2026. Written by Sanjib Sah. AI assisted; reviewed by a human editor.
We have not run or tested this product.
- mCaptcha homepage
official · Observed October 11, 2026
Official homepage: privacy CAPTCHA positioning, no tracking, proof-of-work, UX, docs/demo/GitHub links. Observed 2026-10-11.
- Installing mCaptcha on your website
official · Observed October 11, 2026
Official install guide: dashboard site keys in easy/advanced mode, widget embed via CDN or self-served, backend token verification, trial-only demo. Observed 2026-10-11.
- mCaptcha community
official · Observed October 11, 2026
Official community page: contribution areas, Docker/Ansible/bare-metal deployment, Rust/TypeScript/PostgreSQL/Redis stack, contact channels. Observed 2026-10-11.
- NLnet: mCaptcha
official · Observed October 11, 2026
NLnet project page: self-hosted reCAPTCHA/hCaptcha alternative; privacy, transparency, UX, accessibility; one-click proof-of-work; no IP logging or tracking. Observed 2026-10-11.