wicketkeeper
A privacy-friendly, self-hostable CAPTCHA
6 followers
A privacy-friendly, self-hostable CAPTCHA
6 followers
Stop frustrating users with puzzles. Wicketkeeper is an open-source captcha that uses a fast Proof-of-Work challenge instead. Its self-hosted Go server generates tamper-proof JWTs for challenges and uses a Redis Bloom filter to block replay attacks. A simple JS client integrates into any form, solving the PoW in the background via Web Workers. Get powerful bot protection without sacrificing privacy or user experience.
Hey Product Hunt! 👋
I'm the creator of wicketkeeper, and I'm so excited to finally share it with you all.
Like many of you, I've grown incredibly frustrated with traditional captchas. They're slow, they break the user flow, and let's be honest, picking out all the buses or traffic lights is just plain annoying. On top of that, I was really uncomfortable sending user data to third-party services like Google just to prevent spam.
So, I decided to build wicketkeeper: a captcha system that puts user experience and privacy first.
Instead of a puzzle, Wicketkeeper asks the user's browser to solve a small, invisible computational challenge (a proof-of-work). It's fast enough that a real user won't notice it, but difficult enough to deter simple bots and spam scripts.
It's a two-part system:
* A lightweight Go server that you host yourself (with Redis bloom-filters for replay attack prevention).
* A simple drop-in JavaScript client for your website.
This project is for:
* Indie hackers who want to protect their side projects without a monthly bill.
* Developers who value privacy and want to de-Google their stack.
* Anyone who believes security shouldn't come at the cost of a good user experience.
The project is fully open-source, and I'm here today to get your honest feedback! I'd love to know:
* What do you think of the proof-of-work approach?
* Where would you use a tool like this?
* What are your biggest frustrations with existing captcha solutions?
Thanks,
Abhishek.