django-recaptcha VS django-honeypot

Here is a more detailed description: https://github.com/torchbox/django-recaptcha/issues/291

There is also https://github.com/praekelt/django-recaptcha

Or just go with django-recaptcha, if you wanna feed the Goog.

I also experimented with this https://github.com/praekelt/django-recaptcha and it seemed decent too. But, getting it to work in tandem with the 2fa package was a bit of a pain and I gave up because I thought that a Captcha to prove a human didn't add much security beyond what 2fa already did.

In the previous post, I talked about how we could implement a simple trick to stop bot from continuing to submit a form in our web app. However like I told you, this might not be enough to keep all the bot from doing harm to our website. How to make it better? well another simple way is to implement a ReCaptcha. ReCaptcha is a relatively simple tool to identify if a web form in our site is being submitted by a human being or a robot. For this implementation ReCaptcha, a package called django-recaptcha.

Yes? I haven't used django-recaptcha in a long time but I guess it makes it easy to enable/disable the captcha, or change which version you're using, and integrate it with your Django forms. I mean, you could just read the documentation ?

Building on the /admin idea - you can create a honeypot solution. I.e. leave a fake login form at /admin (when your real one is at /myxyzlogin) on the basis that any legit user will use the real one so you can entrap anybody using the default. https://github.com/jamesturk/django-honeypot