we do so via a large-scale (over 3, 600 distinct users) 13-month real-world user study and post-study survey

results indicate that the website context directly influences (with statistically significant differences) solving time between pass- word recovery and account creation.

We explore the cost and security of reCAPTCHAv2 and conclude that it has an immense cost and no security. Overall, we believe that this study’s results prompt a natural conclusion: reCAPTCHAv2 and similar reCAPTCHA technology should be deprecated.