iPhone can automatically pass captcha on the Internet! How it works in iOS 16

You already know about most of the significant and dozens of minor features of iOS 16. In addition, the Cupertinians add a lot of barely noticeable options to the system, which greatly simplify the life of users of apple gadgets.

One of these features is the new ability to automatically bypass captcha on iPhone and iPad.

How iOS 16 bypasses captcha

The main task of captcha is to protect against bots or spam. Developers of sites and services do not want fake users or specially created for this application to register with them.

For a long time, it was the manual execution of a simple task for a person that was the best test option. Turing. This is the only way to easily distinguish a real person from a program on the network.

However, the Cupertians came up with another confirmation method that allows you not to enter captcha and pass all similar checks. Several factors are used to confirm that the owner of the iPhone is not a robot:

user is using Safari browserwhich is practically not used in all kinds of human imitation systems;

the user’s gadget is protected by a password, Touch ID or Face ID, which means it is already passed authorization during unlocking;

on the user’s device is used Apple ID accountwhich minimizes the chance of using the program instead of a person.

Of course you don’t share all this information with any site that offers captcha entry. Especially for this, Apple has developed confidentiality pass protocol.

The Cupertinos have entered into an agreement with several independent testers who can confirm that they have a living person in front of them, and not a soulless machine. Such companies are called iCloud Attester. Their verdict is accepted by almost all tools and services that protect data using captcha.

During a request from the site, a captcha request is sent to your iPhone, it is intercepted by the iCloud service, which redirects your unique encrypted token to one of the companies iCloud Attester. The partner confirms that you are a living person and signs your token. The signed token is sent in response to the request and there is no need to enter the captcha. So your personal data is not sent to third parties.

All this happens instantly and the user does not feel any additional delay during work. Sites and services simply stop showing you captcha, skipping this step.

It works in 9 out of 10 cases. Captcha can sometimes be bypassed during account registration or other complex procedures where internal local verification methods are used.