CAPTCHA verification is a secondary authentication mechanism provided by Alibaba Cloud IDaaS to distinguish between human users and automated programs or malicious actors. This feature prevents malicious activities such as brute-force attacks, spam registrations, and fraudulent transactions, enhancing system security. This document describes how to enable and configure CAPTCHA verification.
Feature overview
You can find the CAPTCHA verification feature in the section of Alibaba Cloud IDaaS. It provides the following:
-
Multiple verification methods: It supports various interactive methods, including Slider CAPTCHA, Puzzle CAPTCHA, and Image Restoration.
-
Flexible configuration: You can adjust verification policies and strictness based on your business scenarios.
Procedure
Access the CAPTCHA verification page
-
Log on to the Alibaba Cloud IDaaS console and select your IDaaS instance.
-
In the left navigation pane, choose Login > Authentication Configuration.
-
Click the CAPTCHA Verification tab.
Enable CAPTCHA verification
-
Enable verification: Turn on the Enable CAPTCHA Verification switch.
-
Select a verification method. In the Verification Method section, select the type that best suits your business scenario:
-
Slider CAPTCHA: Users drag the slider horizontally all the way to the right to complete the verification.
-
Puzzle CAPTCHA: Users fit the puzzle piece into the correct position.
-
Image Restoration : Users drag a slider to unscramble an image.
-
-
Save the configuration. Click Save to apply the changes.
Usage notes
-
Ensure you understand the characteristics and use cases of each verification method before you enable CAPTCHA verification.
-
Choose a verification method that balances security and user experience.
-
Periodically review your CAPTCHA verification configuration and performance to ensure it remains effective against the latest security threats.