E-Business
Cloudflare Launches New Security Key-Based Replacement for CAPTCHA
Cloudflare, which you may know as a provider of DNS services or the company telling you why the website you clicked on won’t load, wants to replace the “madness” of CAPTCHAs across the web with an entirely new system.
CAPTCHAs are those tests you have to take, often when trying to log into a service, that ask you to click images of things like busses or crosswalks or bicycles to prove that you’re a human.
(CAPTCHA, if you didn’t know, stands for “Completely Automated Public Turing test to tell Computers and Humans Apart.”)
The problem is, they add a lot of friction to using the web and can sometimes be difficult to solve — I’m sure I’m not the only person who has frustratingly failed a CAPTCHA because I didn’t see that corner of a crosswalk in one image.
In a blog, Cloudflare says it aims to “get rid of CAPTCHAs completely” by replacing them with a new way to prove you are a human by touching or looking at a device using a system it calls “Cryptographic Attestation of Personhood.” Right now, it only supports a limited number of USB security keys like YubiKeys, but you can test Cloudflare’s system for yourself right now on the company’s website.
I tried it out, and it worked great. All I had to do was click the prominent “I am human (beta)” button on the site, then follow a few prompts to select my security key, then tap it, and then allow the site to access the make and model of the key. When I did, the system waved me through (though it just took me back to the blog).
The whole process took all of a few seconds, and I have to admit that it was really nice not to puzzle over grainy images of busses and bus-looking objects. And in addition to the speed of it all, this new method could have a major accessibility benefit, as those with visual disabilities may not be able to complete CAPTCHAs in their current form.
Here is the company’s “elevator pitch” of what’s going on behind the scenes to establish that you’re a human via its new method: “The short version is that your device has an embedded secure module containing a unique secret sealed by your manufacturer. The security module is capable of proving it owns such a secret without revealing it. Cloudflare asks you for proof and checks that your manufacturer is legitimate.”
You can read a much more extensive explanation on the company’s blog.
While it’s all an intriguing idea, it may not be the end to CAPTCHAs as we know it just yet. For one thing, you probably won’t see the prompt in many places, as Cloudflare says this is only an experiment right now, available “on a limited basis in English-speaking regions.” And in its current state, it only works with a limited set of hardware: YubiKeys, HyperFIDO keys, and Thetis FIDO U2F keys.
Cloudflare promises it will “look into adding other authenticators as soon as possible.” That could possibly expand to your phone: Cloudflare suggests the possibility of tapping a phone to their computer to pass a wireless signature using NFC. Google can now treat both iPhones and Android phones as physical security keys; If Google and Apple got on board with Cloudflare’s method, it could significantly reduce the barrier to entry to using it, since smartphones are much more common than security keys.
However, Cloudflare’s system may actually be a worse solution, according to one critic. As Ackermann Yuriy (CEO of the consulting firm Webauthn Works) points out, “attestation does not prove anything but the device model,” meaning that it doesn’t actually prove if someone using a device for authentication is, in fact, a human.
Cloudflare essentially admits this itself in its own blog, saying that a drinking bird (those bird toys that dip their beaks into water repeatedly) could press a touch sensor on a security key, thereby passing the authentication test. If the point of CAPTCHAs is to prevent bot farms from overrunning websites, we may need to consider whether bot farms equipped with with jury-rigged security key devices (or worse) will take advantage.
Cloudflare isn’t always positively associated with CAPTCHAs; in a recent example, the company moved from Google’s reCAPTCHA to a service from hCaptcha in April 2020, and some people weren’t fans:
CAPTCHAs also assume that website owners want to allow relatively anonymous traffic, but anonymous identity may be irrelevant if an website has your actual identity through login information you’ve provided. And with the recent push against ad targeting, driven in large part by Apple’s huge new privacy feature in iOS 14.5 that asks users if they want to let each app track them around the web, it’s possible that website providers will move more toward logins anyway.
Though it certainly sounds like a hassle to have to potentially deal with even more logins (which is much easier to do with a great password manager!), that shift could, counterintuitively, have the potential benefit of pushing us toward a passwordless future even sooner. If more services are pushing for direct logins, that could lead to more of them supporting security keys instead of a password. And more sites supporting security keys could put pressure on others to support them as well, like the trend we see toward two-factor authentication with phones.
While we’re not at that passwordless future just yet, Cloudflare’s potential replacement for the CAPTCHA could be a first step in that direction.
The Nigeria Internet Registration Association (NiRA) presents its report on .ng domain name registration and renewal statistics for the first quarter of 2025, highlighting the continued expansion of Nigeria’s digital footprint. The data underscores a consistent and significant adoption of the nation’s Country Code Top-Level Domain (ccTLD), reinforcing its pivotal role in the burgeoning Nigerian digital economy.
During the period spanning January to March 2025, a total of 40,791 .ng domain names were recorded. This figure comprises 22,236 new registrations and 18,555 renewals, indicating a healthy balance between the acquisition of new digital identities and the sustained commitment of existing domain name holders to their online presence.
Analysis of the registration trends within the quarter reveals a notable upward trajectory, with a 13.92% increase in domain name registrations observed between February and March 2025.
This growth signifies an increasing recognition of the importance of a localized online identity by a diverse range of stakeholders, including individuals, startups, Small and Medium-sized Enterprises (SMEs), and larger organizations.
Notably, the .com.ng extension continues to be the dominant choice, accounting for over 60% of both new registrations and renewals. This reaffirms its status as the preferred domain name extension for Nigerian businesses seeking to establish a credible and locally relevant online brand presence while maintaining global accessibility. The sustained popularity of .com.ng underscores its perceived value among Nigerian entrepreneurs and enterprises seeking to secure their digital real estate.
This upward trajectory isn’t happening by chance. The Nigeria Internet Registration Association (NiRA) has remained intentional in its drive for digital inclusion and domain adoption. Through public education, training via the .ng Academy, outreach campaigns, and partnerships with stakeholders across the tech ecosystem, NiRA has consistently advocated for the importance of owning a local domain. The current standing of .ng as the second most registered ccTLD in Africa reflects the efficacy of these efforts.
Digital adoption in Nigeria is no longer just about being online—it’s about owning your digital identity. And with a .ng domain, Nigerians are better positioned to assert that identity, connect with local and international audiences, and gain better control over their digital footprints.
As we look toward the rest of 2025, the Q1 results serve as a strong signal: more people are embracing the digital future, and the .ng domain is increasingly becoming their first step.
National Identity Management Commission (NIMC) of Nigeria has launched a new digital identity verification tool called the NIN Authentication (NINAuth) application.
The initiative, which forms part of President Bola Tinubu’s Renewed Hope Agenda, aims to strengthen the country’s national digital identity management framework.
The launch builds upon Nigeria’s comprehensive unified digital identity system that has been transforming access to financial services and government programs.
The NINAuth application introduces several key features focused on data security and privacy.
The platform requires explicit user consent before sharing identity information for Know Your Customer (KYC) processes, giving individuals greater control over their personal data.
The system provides seamless access to various government services, including SIM card registration, immigration applications, passport processing, tax filings, and financial transactions.
The development follows significant investment in Nigeria’s digital identity infrastructure, including a $45.5 million support from the World Bank as part of the Digital Identification for Development (ID4D) project.
As the official service for integration with NIMC’s backend infrastructure, NINAuth enables secure verification processes across ministries, departments, and agencies (MDAs).
The application is available for download on both the Google Play Store and Apple iOS App Store for users of the National Identification Number (NIN).
The rollout represents a significant milestone in Nigeria’s ongoing efforts to digitize government services and strengthen identity verification processes.
“NINAuth is a cutting-edge suite of services including web, API, and mobile verification designed to enhance data security, protect privacy, and simplify access to government services,” said Dr. Kayode Adegoke, Head of Corporate Communications at NIMC.
“The platform introduces a robust layer of protection, empowering individuals with greater control over their personal information.”
The implementation supports the objectives of the recently established Nigeria Digital Identification for Development Project Ecosystem Steering Committee, which oversees the country’s digital identity initiatives.
President Bola Ahmed Tinubu has approved the launch of the NINAuth app and directed its use for verification and authentication across all MDAs.
The application provides a secure single sign-on solution for accessing government services and social protection programs while maintaining strict data privacy controls.
The centralized approach to digital identity management represents a significant step forward in Nigeria’s digital transformation journey and its commitment to modernizing government services.
Nigerian Copyright Commission (NCC) has set in motion a machinery to checkmate the booming copyright piracy market in the country.
Copyright piracy is said to cost Nigeria an annual loss estimated at billions of naira.
Despite the absence of a coordinated or official statistics to gauge the quantum of loss, John Asein, director general, NCC, said as far back as 2019, Nigeria lost N918 trillion ($3 billion) annually to digital piracy.
The financial damages severely impact local businesses and innovation efforts.
The commission, in collaboration with the World Intellectual Property Organisation (WIPO), has started a project to develop strategies and tools to address the menace.
Speaking at a stakeholders’ meeting on the WIPO project to address online copyright piracy in Nigeria, Asein said digital technologies have unlocked tremendous opportunities for the creative and innovation sectors.
The NCC boss said technology also poses serious challenges, including online piracy, which he said is growing rapidly.
He said: “Pirate sites continue to emerge rapidly, with statistics indicating a 6.7 per cent increase in user visits. A significant percentage of these users are students aged between 18 and 24, with social media and messaging platforms becoming major gateways for accessing pirated content.”
He added: “No industry is immune. The most affected sectors include television (43.6 per cent), publishing (27.5 per cent), film (12.9 per cent), music (7.0 per cent), and software (6.2 per cent).
“Far beyond mere statistics, the victims are no longer only foreign right owners. Many Nigerians in these sectors have also been bruised and their creative enterprises ruined.”
Lagos Slush’D 2025 To Promote Creativity among Start-ups
Stakeholders Seek Strengthening of Digital Infrastructure @ IoT West Africa
Airtel Introduces Full Shopping Experience Within My Airtel App
Jumia Expands Delivery Service to Nigeria
Q1 2025 .ng Domain Name Statistics Reflect Nigeria’s Advancing Digital Landscape
Telecom2 days agoNigeria to Receive $3Bn Telecoms Infrastructure in June – Minister
E-Business2 days agoWhy Even the Most Experienced can Fall Victim of AI Phishing Attacks
Telecom2 days agoLegend Internet Debuts Nigeria’s First Fibre-to-the-room Service
E-Business2 days agoNIPOST Partners KLM on Global Mail Delivery
E-Financial2 days agoCBN Issues Advisory on Scammers Flaunting Fake Contracts
News2 days agoBritish High Commission Reaffirms Strong Ties with Nigeria
Telecom2 days agoNASENI Commends President Tinubu’s Push for Local Industry Growth
News2 days agoNERC Orders DisCos to Compensate Band A Customers in 557 Streets