Verification code should not only be used to prove itself

The authentication Code (CAPTCHA) is the abbreviation for "completely automated public Turing test to tell Consolidator and Humansapart" (automatic distinguishing between computer and human Turing tests), is a public automatic program that distinguishes users from computers and people.

Verification code now exists in every corner of the Internet, submit a verification code, reply has a verification code, registration has a verification code, binding has a verification code, modify the verification code, pay and verification code. From a security standpoint, verification code is a good way to prevent the operation of some malicious programs, but in the interface designers have racked their brains to reduce user action steps, is unavoidable but not decisive operation of the step, According to statistics, the average stay in the verification code more than 5.5 seconds, and some sites are particularly high security precautions, verification code information is random case + random number + random interference graphics mix.

Sometimes this is just a few seconds, the brain through the thought process can easily change the current decision, if this is a registration process, it is likely that the site has lost a user, if this is a pay process, the site may have lost a deal. This is definitely not our intention.

But in a variety of hacker means today, the site has to use the verification code to ensure the user's operation security, then we can verify code this step do not so troublesome? Most Web sites today still use content and interactive authentication codes, but there are also sites where they are making some changes. Imagine if the verification code is a random English word + random interference background, so that the user in only a few letters output, the current mainstream input method with the association words, automatically displayed, simple choice can be, not easy to make mistakes. Personal feeling is more suitable for the definition of small fresh/Wenqing site, with the word to do the verification code, although only a small detail, but still maintain the overall style of the site, of course, if you encounter the use of a few without association word input Method users may be slower. Some methods are more suitable for use in China, such as the image of random Chinese characters and random interference background, although this will take time, but in China, the Chinese language at least faster than the recognition speed, the speed is also high. If the verification code in Chinese set as a random idiom, with the input method of the association function, this can be more convenient. There is also a way to fill out a form that is very long. Make some changes to the location of the verification code, and place it after the key fill or put in front of the obvious position, so that the user will be the next step is not necessary, and have to do a step done, after the time to concentrate on filling out their own, to improve efficiency also have some help, of course, personal advice to verify the content of the code not too complicated, The refresh mechanism should not be too strict, or the user will encounter obstacles in the first step, let alone patiently fill in the back content. At present, many design teams are constantly optimizing the presentation of the verification code, indicating that everyone is aware of the role and positioning of the verification code. So personally, since the interface design is to human-computer interaction, the overall design of the operation interface, then in addition to pay attention to the appearance, color style, but also pay attention to user habits, in the current mainstream design, will be simple to maximize the operation, the burden of minimizing memory.