The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →A CAPTCHA can fail even when you select the correct images. The widget may be blocked by an extension, JavaScript may be disabled, the browser may be unsupported, the network may look automated, or the website may have a broken CAPTCHA configuration.
Work through the checks below in order. Start with the quick browser fixes, then isolate your network or device. If you manage the website, use the provider-specific error codes and configuration checks near the end.
Quick fixes for a CAPTCHA that will not work
- Reload the CAPTCHA itself. For Google reCAPTCHA, select the reload button beside the image to receive a different challenge. Do not repeatedly submit the entire form if the CAPTCHA is the only part failing.
- Complete the CAPTCHA last. On a long registration, checkout, or support form, fill in the other fields first. Google says verification can expire after a period of time or inactivity. If it expires, select the checkbox again and restart the challenge.
- Enable JavaScript. Current reCAPTCHA and Cloudflare Turnstile require JavaScript. A script blocker, strict privacy setting, corporate filtering tool, or browser extension can make the widget appear blank or unresponsive.
- Temporarily disable extensions for the site. Test with ad blockers, content blockers, script blockers, fingerprinting protection, canvas protection, and privacy extensions disabled. Reload the page after changing the setting. If that solves the problem, allow the website rather than leaving every extension disabled.
- Try a private window. Open an Incognito or Private window and load the page again. This is a diagnostic test for extensions and stale site data, not a guaranteed fix. If the CAPTCHA works there, clear the site’s cookies or identify the extension causing the conflict.
- Try another supported browser. Use a current Chrome, Firefox, Safari, Edge, or Samsung Internet release. Google reCAPTCHA supports the two most recent major versions of its listed desktop browsers. Cloudflare supports current releases and, depending on the browser, the two previous major versions. Internet Explorer is not supported by Cloudflare.
- Turn off a VPN or proxy temporarily. VPNs and proxies do not always cause failures, but they can interfere with challenge requests or cause a network to receive additional checks. Test once without one to determine whether it is involved.
- Test another network. Connect the device to a phone’s mobile hotspot. If the CAPTCHA works on the hotspot but not on Wi-Fi, the likely cause is the original network, DNS filtering, firewall, proxy, or an IP reputation issue.
When the CAPTCHA is visible but the challenge keeps failing
A failed answer is only one possibility. Challenge systems also assess the browser environment and the request path. A correct response can fail if the challenge has expired, its scripts cannot reach the provider, or the service detects behavior associated with automation.
Use an audio challenge when image puzzles are difficult
In Google reCAPTCHA, select Get an audio challenge, then press PLAY. Enter the numbers you hear in the text field and press ENTER or select Verify. If the recording is unclear, select Get a new challenge. If it will not play in the page, use Alternatively, download audio as MP3.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Do not use an embedded browser or automated client
Open the page in a normal, supported browser instead of an email-client preview, an in-app browser, or a custom webview. Cloudflare notes that embedded and in-app browsers may have limited support. Its challenges do not support command-line clients such as wget and curl, headless browsers, or automation frameworks such as Selenium, Puppeteer, and Playwright.
Check the system clock
An incorrect date, time, or time zone can invalidate time-sensitive challenge requests. Set the device clock to update automatically, then close and reopen the browser. This is especially relevant to Cloudflare Turnstile errors 110600 and 200100.
What to do when reCAPTCHA is missing or unsupported
If the checkbox is absent, the page says the browser environment is unsupported, or the widget never loads, Google recommends:
- Update the browser.
- Enable JavaScript.
- Disable plugins or extensions that may conflict with reCAPTCHA.
A faulty implementation on the website can also be responsible. If reCAPTCHA works on other sites but not on one particular form, report the problem to that site’s administrator rather than repeatedly changing your device.
When Google says your computer or network is sending automated queries
Google may display a message such as “We’re sorry, but your computer or network may be sending automated queries.” First, open Google’s reCAPTCHA test page. If an ordinary CAPTCHA appears and works there, Google says the computer and network are safe and the original website may have a configuration problem. If the warning also appears on the test page, follow Google’s unusual-traffic help for the network-level issue.
Rank #2
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
For a quick comparison, test the same page in another supported browser, without extensions, and on a mobile hotspot. These tests help distinguish a local browser problem from a network or site problem.
Turnstile error codes and what they mean
Cloudflare Turnstile is not the same product as Google reCAPTCHA, so its codes point to different causes. If a site shows a code, use it instead of guessing that the answer was wrong.
| Code | Likely cause | Useful action |
|---|---|---|
110100, 400020 |
Invalid site key | The site owner must verify the key in the Cloudflare dashboard. |
110110 |
Site key not found | Check the key spelling and dashboard configuration. |
110200 |
Domain not authorized | The site owner must add the current domain under Hostname Management. |
110600 |
Challenge timed out | Check the visitor’s clock and restart the challenge without leaving it idle. |
110620 |
Interaction timed out | Restart the widget. Developers can use turnstile.reset(). |
200100 |
Clock or cached-challenge problem | Correct the device clock and bypass stale intermediary cache. |
200500 |
Iframe load error | Check whether challenges.cloudflare.com is blocked. |
300*, 600* |
Generic challenge failure or bot behavior detected | Test without blockers, VPNs, automation, or an unusual browser environment. |
A 401 Unauthorized in the browser console does not automatically mean Turnstile is broken. Cloudflare documents a case where the widget requests a Private Access Token that the browser or device does not support. If the widget completes and returns a token, that console message can generally be ignored.
hCaptcha-specific failures
For hCaptcha, network-error indicates a connection problem. hCaptcha retries automatically several times before closing. script-error means the JavaScript SDK did not load; a firewall blocking api.js is one possible cause.
Other useful codes include:
challenge-expired: the time limit to answer elapsed.challenge-closed: the challenge was closed.missing-captcha: no CAPTCHA was found.invalid-captcha-id: the stored widget ID does not match the rendered widget.
If you are only visiting a site, retry after checking JavaScript, extensions, and the network. Website developers should inspect the widget ID and integration code.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
For website owners: fix the integration instead of blaming the visitor
If users consistently fail on one form while the provider’s test page works, inspect the site’s implementation. Common configuration mistakes include using the wrong site key, failing to authorize the hostname, loading the provider script too late, blocking the provider’s iframe, or allowing the token to expire before the form is submitted.
Turnstile error handling
Turnstile automatically retries by default because its retry setting is auto. Setting retry: 'never' removes that automatic recovery and makes the application responsible for retrying. Also note that automatic retry can invoke the error callback multiple times for the same underlying problem. Error handlers should avoid displaying duplicate messages or starting repeated recovery actions.
Configure an error callback so a challenge failure does not become an unhandled JavaScript exception:
<div class="cf-turnstile"
data-sitekey="your-sitekey"
data-error-callback="onTurnstileError"></div>A rendered widget can be reset from an error, timeout, or expiry callback:
turnstile.reset('#my-widget');A retry configuration can look like this:
turnstile.render('#my-widget', {
sitekey: 'your-sitekey',
retry: 'auto',
'retry-interval': 8000,
'error-callback': handleError
});When diagnosing an error, check the browser console and network panel for blocked requests to challenges.cloudflare.com, JavaScript exceptions, content-security-policy violations, and failed iframe loads.
Rank #4
- USB-C or tap via NFC for easy authentication on any compatible device. No drivers needed; optional Kensington software available for advanced management features.
- Works across Windows, macOS, iOS, Android, ChromeOS, and supports Passkeys and Apple ID.
- Slim, keychain-ready form for easy carry and on-the-go authentication
- IP68-rated for dependable performance
- FIDO CTAP 2.1 for enhanced security features (e.g. resident credentials, Passkey support) and backwards compatibility with CTAP 2. FIDO2 L2 certified security for phishing resistant protection against identity theft and unauthorized access.
hCaptcha loading and domain configuration
With explicit hCaptcha rendering, define the onload callback before the SDK loads and render the widget from that callback. Rendering immediately can create an initialization race:
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitches<script
src="https://js.hcaptcha.com/1/api.js?onload=yourFunction&render=explicit"
async
defer>
</script>For domain restrictions, open the site key in the hCaptcha dashboard, enable Domain allowlisting, add the hostnames, and save. Enter bare hostnames such as example.com, not full URLs such as https://example.com/login. A listed hostname covers its subdomains. hCaptcha’s documentation currently states that domain allowlisting is off by default, so confirm whether it has been enabled for the site key.
To reset a rendered hCaptcha widget, use its widget ID:
hcaptcha.reset(widgetID)How to identify who needs to fix the problem
| What you observe | Most likely area |
|---|---|
| The widget is blank in every browser on one website | Website integration, blocked provider script, or an unauthorized domain. |
| It works in Private mode but not the normal window | Extension, cookie, cache, or privacy setting. |
| It works on a hotspot but not home or office Wi-Fi | Firewall, proxy, DNS filter, VPN, or network reputation. |
| It works on another device using the same network | Local browser, clock, extension, or device configuration. |
| Only image challenges fail | Use the audio option or reload for a different challenge. |
| The provider test works but the target form fails | The target site’s CAPTCHA integration or form workflow. |
When to contact the website
Contact the site owner when the CAPTCHA fails in two supported browsers, with extensions disabled, and on a second network—or when a provider error identifies an invalid key, missing key, or unauthorized domain. Include the page URL, approximate time, browser and operating-system versions, the visible error code, and whether the widget works on the provider’s test page. Do not send passwords, CAPTCHA answers, or session cookies.
For a single visit, the practical stopping point is usually a clean test in a supported browser without blockers, followed by a mobile-hotspot test. If both fail, the site or CAPTCHA provider needs to investigate; repeatedly clicking the challenge will not repair a broken integration.
Best Value
- Ultra-Compact FIDO2 Security Key - Plug-and-stay or carry on a keychain. This USB-A hardware security key offers portable, always-on protection for desktop and mobile use. (Item Size: 0.75 X 0.74 IN x 0.25 IN)
- USB-A Hardware Key for All Devices - Works with USB-A ports on PC, Mac, Android, and other laptop/notebook device. Enables secure, cross-platform login with FIDO2.0 passkey support.
- FIDO Certified Security Key - Meets FIDO and FIDO2 standards. Works with Google, Microsoft, GitHub, Dropbox, and more. Please check service compatibility before purchase.
- Passwordless Login with Passkey - Supports passkey login via WebAuthn and CTAP2. Enjoy password-free sign-ins where supported. Not all websites or services currently support passkeys.
- Advanced Multi-Factor Authentication - Offers 200 FIDO2 passkey slots and 50 OATH-TOTP slots. Strong, flexible 2FA/MFA support across various apps and authentication platforms.
FAQ
Why does a CAPTCHA fail when I answer it correctly?
A CAPTCHA can fail because JavaScript or its iframe is blocked, the browser is unsupported, the challenge expired, the device clock is wrong, the network triggered an automated-traffic check, or the website used an invalid key or unauthorized domain. A wrong answer is only one possible cause.
Does Private or Incognito mode fix CAPTCHA problems?
It can help identify extension, cookie, and cached-data conflicts, but it is not a guaranteed fix. If the CAPTCHA works privately, disable extensions or clear the affected site’s data in the normal browser.
Can I complete a CAPTCHA with JavaScript disabled?
Usually not. Google instructs users to enable JavaScript for reCAPTCHA, and Cloudflare Turnstile requires JavaScript.
What should I do if the Google image CAPTCHA is too difficult?
Select the reload button beside the image for another challenge. You can also choose Get an audio challenge, press PLAY, enter the numbers, and select Verify.
Free tools Windows power users keep installed
One-click scans. No signup required.
Why does a CAPTCHA work on my phone but not my computer?
The computer may have a conflicting extension, outdated browser, incorrect clock, blocked script, VPN, proxy, or stricter firewall policy. Compare both devices on the same network, then test the computer on a mobile hotspot.
Is a 401 error in the console proof that Cloudflare Turnstile is broken?
No. Cloudflare documents a benign 401 related to an unsupported Private Access Token. If Turnstile resolves and returns a token, that particular console message can generally be ignored.
The Bottom Line
Start with the least disruptive checks: reload the challenge, complete it last, enable JavaScript, disable blockers, and use a supported browser. Then test without a VPN or proxy and on another network. If the failure follows one website—or displays an invalid key, unauthorized-domain, or iframe error—the website owner must correct the CAPTCHA integration.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →
