智能手势验证码-VAPTCHA

由VAPTCHA提供技术支持

请绘制图中手势完成人机验证

请从验证场景打开此网页

操作演示

The standard version will jump to the current page to complete the verification. If you need to verify on your verification scenario page, please upgrade to the enterprise version.

This verification page is generated dynamically. You cannot enter the verification process through the direct access link. If you encounter a black screen prompt, please try to re initiate the verification from the verification scenario page.

Compared with the traditional verification code, vaptcha is more secure. Traditional verification codes mainly collect visual information for Turing test, while vaptcha will collect more invisible information (such as geometric and biological characteristics of trajectory, user historical verification behavior, browser environment, equipment information, etc.) and submit it to the corresponding feature model and multi-level risk control algorithm logic, and finally return the man-machine judgment results. With the increase of information available in hardware, the future vaptcha can not only distinguish between humans and machines, but also distinguish you from you rather than others.

FAQ

VAPTCHA收费吗？

标准版	永久免费，无验证量及攻击拦截量限制。
企业版	如果有自定义手势图、个性化防护策略等需要消耗额外服务器资源的需求则需要升级到企业版。企业版套餐分为包量和包月两种，以验证通过量而不是请求量或验证量作为计费依据。

标准版和企业版有什么区别？

标准版和企业版在安全强度上没有显著差别，都一样安全。主要区别有：

验证方式	标准版验证发起时将跳转到VAPTCHA专用验证网页进行验证，企业版则在本站进行验证，手机端验证时两个版本没有明显的体验上的差异。
广告显示	标准版将会在不影响用户体验的前提下随机展示广告，企业版则不显示广告。
域名绑定	标准版每个验证单元只能关联一个域名，企业版则可以通过高级设置关闭域名校验来实现多域名关联。
个性化	企业版开放更多的个性化设定，比如验证策略、验证图等，标准版则使用系统统一的验证策略。

了解更多的版本差异，请登录用户后台查看。

能拦截人工打码吗？

原则上智能验证码的作用是区分人机，而人工打码的验证主体是人，仅通过生物特征模型进行甄别是很难区分的，但是VAPTCHA强大的风控分析引擎包含多样化的安全策略，对于人工打码仍然具备较强的防御能力。

手机端验证成功后一直重复弹出验证？

标准版的验证码在手机网页中会先跳转到我们的验证页面完成验证后返回之前页面，极少部分浏览器环境可能存在无法识别的问题。企业版使用的是在当前网页中弹出验证码，不存在这个问题。

提示验证单元与域名不匹配？

检查验证单元绑定域名是否正确设定，请填写一级域名，则所有二级域名均为有效域名,如：vaptcha.com。检查referer是否为空或者未正确提交。

服务器端二次验证网络请求失败？

检查服务器是否有对外请求域名限制，如果有请将 *.vaptcha.com,*vaptcha.net 添加到白名单中。

添加了自定义背景图为什么没有生效？

检查服务器是否有对外请求域名限制，如果有请将 *.vaptcha.com,*vaptcha.net 添加到白名单中。

什么是无感验证？

无感验证可由用户自行配置，当此配置开启时，允许受信任的用户或客户端当次验证请求发起时通过综合风险模型的安全评估后可以一键完成人机验证，整个过程响应时间在200ms内，大幅提升用户体验。

如何保证验证服务的稳定？

VAPTCHA在全球多个区域均部署了充足主备服务器资源以应对日常验证峰值。当某个节点遭到重度攻击而导致响应变慢时，系统会自动进行调度将当前节点的正常验证请求分发到临近节点完成，直至被攻击节点恢复正常。VAPTCHA有充分的能力保证验证服务的绝对稳定。

我的网站用户分散在世界各地，能保证验证的快速响应吗？

如果你在配置代码时，将area的参数设置为auto，VAPTCHA则可以根据用户所在区域匹配最近的验证资源，理论上全球用户发起的验证请求均可以在200ms内响应完成。

验证图上提示“v3.js 版本已更新，请升级！”？

V3.JS升级新版本时，如果你将V3.JS放到了本地则会出现这个提示，请尽快更新版本即可。

验证图上提示“验证需要开启cookie”？

VAPTCHA验证过程会用到cookie来存储安全标识，为了更好的验证体验建议开启cookie。开启cookie方法：请在浏览器设置 - 隐私设置开启cookie，需要注意的是，浏览器无痕模式下cookie是默认禁用的。

短信价格补贴

VAPTCHA触发短信接口运营商直连，秒级发送，并提供价格补贴，国内短信补贴后单价低至2.8分/条，远低于市场价，支持国内、国际短信发送。接入流程：登录网站 - 获取SMSID及SMSKEY - 代码部署

js变量丢失？

标准版默认打开新窗口进行验证，当浏览器不支持windows.open方法打开新窗口时，则从当前页直接打开验证页进行验证，验证完成后回退到验证场景页，这样可能导致场景页用变量存储的表单数据丢失，建议改用cookie存储变量。企业版则无此问题。

FAQ

Does vaptcha charge?

SV	Permanently free, no limit on the amount of verification and attack interception.
EV	If there is a need to consume additional server resources such as custom gesture diagrams and personalized protection strategies, you need to upgrade to the enterprise version. The enterprise package is divided into two types: package quantity and monthly package. The billing basis is the verified quantity rather than the requested quantity or verified quantity.

What is the difference between SV and EV?

First, there is no significant difference in security levels.

Verification method	The SV needs to jump to the VAPTCHA page for verification, and the EV verified on your site. There is no obvious experience difference between the two versions when verifying on the mobile terminal.
Advertising display	The SV will display advertisements randomly, while the EV will not display advertisements.
Domain binding	Each unit of the SV can only be associated with one domain , while the EV can be associated with any number of domain names.
Customization	The EV opens more personalized settings, such as verification strategy and verification diagram, while the SV uses the unified verification strategy of the system.

intercept manual verification?

In principle, the function of AI verification code is to distinguish between man and bot, while the verification subject of manual coding is human, which is difficult to distinguish only through biometric model. However, VAPTCHA's powerful risk control analysis engine contains diversified security strategies and still has strong defense ability against manual coding.

Prompt: the unit does not match the domain name?

Please check whether the binding domain name of the unit is set correctly. Check whether the referer is empty or not submitted correctly.

Server side failed to verify network request?

Check whether the server has external request domain name restrictions. If so, please add *. Vaptcha.com, * vaptcha.net to the white list.

What is non-sense mode?

Only the EV supports non-sense mode. In this mode, trusted users or clients can complete verification without gesture drawing, which can greatly improve the user experience.

How to ensure the stability of services

VAPTCHA has deployed sufficient primary and standby server resources in many regions around the world to cope with daily verification peaks. When a node is severely attacked, resulting in slow response, the system will automatically schedule and distribute the normal verification request of the current node to the adjacent nodes until the attacked node returns to normal. VAPTCHA has sufficient ability to ensure the absolute stability of verification services.

My website users are scattered all over the world. Can VAPTCHA ensure the rapid response of verification?

If you set the parameter of area to auto when deploy the SDK, VAPTCHA can match the nearest authentication resources according to the user's region. Theoretically, the authentication requests initiated by users all over the world can be responded within 200ms.

Prompt :"v3.js version has been updated, please upgrade!"

When upgrading v3.js to a new version, if you put v3.js locally, this prompt will appear. Please update the version as soon as possible.

Prompt: "Please open the cookie"

Cookies will be used to store security identifiers during vaptcha authentication. It is recommended to open cookies for better authentication experience. How to enable Cookies: please enable Cookies in browser settings - privacy settings. Note that cookies are disabled by default in browser traceless mode.

Variable missing？

By default, the SV needs to open a new window for verification. When the browser does not support the windows.open method to open a new window, it directly opens the verification page from the current page for verification, and returns to the verification scenario page after verification. This may cause the loss of form data stored in variables on the scenario page. It is recommended to use cookies to store variables. The EV does not have this problem.