內容簡介
useHUMA 是一款無需 CAPTCHA 的隱形機器人保護外掛，透過觀察訪客行為來判斷是否為真實人類，並有效阻擋機器人，提升網站安全性與使用者體驗。
【主要功能】
• 阻擋垃圾評論，防止進入審核佇列
• 停止虛假帳號註冊
• 無需用戶干預，保持訪客流暢體驗
• 隱私優先，不收集個人識別資訊
• 單一設定，簡易啟用保護
外掛標籤
開發者團隊
② 後台搜尋「useHUMA — Invisible Bot Protection (No CAPTCHA)」→ 直接安裝（推薦）
原文外掛簡介
CAPTCHAs interrupt every visitor to catch a few bots — and modern bots solve them anyway. useHUMA takes the opposite approach: it observes how a visitor behaves (mouse rhythm, typing cadence, scroll patterns, touch physics) and scores the probability that a real human is present. Real visitors feel nothing. Bots get blocked.
What it protects:
Comments — spam comments are rejected before they reach your moderation queue
User registration — fake account signups are stopped at the door
Contact Form 7 — form spam is invalidated on submission (if CF7 is installed)
Why site owners choose it:
Invisible — no checkbox, no image puzzles, no friction for real visitors
Privacy-first — zero PII: no keystroke contents, no names, no fingerprinting databases; only statistical aggregates of interaction patterns
Fail-open by design — if the verification service is ever unreachable, your forms keep working
Tells you when it was an AI agent — not just bot or human. Playwright, Puppeteer, browser extensions and computer-use agents come back with their own verdict, on every plan including the free one
One setting — paste your API key and you’re protected
You’ll need an API key from humaverify.com. It is free and it stays free: every account starts with 14 days of the Starter plan and then settles on the Free plan, 1,000 verifications a month, for ever, no credit card. Most small sites never need more than that.
External services
This plugin connects to the useHUMA API (https://humaverify.com) to score form submissions. On each protected submission, the plugin sends: anonymous behavioral statistics collected on the page (timing variance of mouse/keyboard/scroll/touch interactions — never the contents of what was typed) and a pseudonymous identifier. When the form provides an email address it is hashed on your server first, with a salt generated once and stored only in your own WordPress database, so the address itself never leaves your site and the hash cannot be reversed or matched against any other site. No other personal data is transmitted.
This service is provided by useHUMA: terms of service, privacy policy.
