<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Jaco</title>
    <description>The latest articles on DEV Community by Jaco (@jaco).</description>
    <link>https://dev.to/jaco</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3844129%2Fec14d516-3db1-42d2-b57f-14be7e661d6e.jpeg</url>
      <title>DEV Community: Jaco</title>
      <link>https://dev.to/jaco</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/jaco"/>
    <language>en</language>
    <item>
      <title>Why I stopped using CAPTCHAs and built a behavioral API instead</title>
      <dc:creator>Jaco</dc:creator>
      <pubDate>Thu, 26 Mar 2026 19:17:11 +0000</pubDate>
      <link>https://dev.to/jaco/why-i-stopped-using-captchas-and-built-a-behavioral-api-instead-ne1</link>
      <guid>https://dev.to/jaco/why-i-stopped-using-captchas-and-built-a-behavioral-api-instead-ne1</guid>
      <description>&lt;h2&gt;
  
  
  The breaking point
&lt;/h2&gt;

&lt;p&gt;A form we ran had a CAPTCHA. Completion rate: 58%. After removing it: 81%. Bots barely slowed down. Real users just left.&lt;/p&gt;

&lt;p&gt;That's when I realized: CAPTCHAs aren't really protecting you. They're taxing your real users to slow down bots by seconds.&lt;/p&gt;

&lt;h2&gt;
  
  
  The insight behind HUMA
&lt;/h2&gt;

&lt;p&gt;Humans and bots behave fundamentally differently.&lt;/p&gt;

&lt;p&gt;When a human fills out a form, they:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Move the mouse in curved, organic paths&lt;/li&gt;
&lt;li&gt;Type with natural rhythm — faster on familiar words, pauses before corrections&lt;/li&gt;
&lt;li&gt;Scroll unevenly, sometimes going back up to re-read&lt;/li&gt;
&lt;li&gt;Take time to think before clicking&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Bots execute scripts:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Linear mouse paths or no mouse movement at all&lt;/li&gt;
&lt;li&gt;Perfectly timed keystrokes&lt;/li&gt;
&lt;li&gt;Instant form completions&lt;/li&gt;
&lt;li&gt;Zero hesitation&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;These behavioral signals are a much richer signal than "can you read this blurry text."&lt;/p&gt;

&lt;h2&gt;
  
  
  How HUMA works
&lt;/h2&gt;



&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight html"&gt;&lt;code&gt;&lt;span class="c"&gt;&amp;lt;!-- 1. Drop this on your frontend --&amp;gt;&lt;/span&gt;
&lt;span class="nt"&gt;&amp;lt;script &lt;/span&gt;&lt;span class="na"&gt;src=&lt;/span&gt;&lt;span class="s"&gt;"https://humaverify.com/huma.js"&lt;/span&gt;&lt;span class="nt"&gt;&amp;gt;&amp;lt;/script&amp;gt;&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;





&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;&lt;span class="c"&gt;# 2. Call this from your backend&lt;/span&gt;
curl &lt;span class="nt"&gt;-X&lt;/span&gt; POST https://humaverify.com/api/v1/verify &lt;span class="se"&gt;\&lt;/span&gt;
  &lt;span class="nt"&gt;-H&lt;/span&gt; &lt;span class="s2"&gt;"Authorization: Bearer huma_live_..."&lt;/span&gt; &lt;span class="se"&gt;\&lt;/span&gt;
  &lt;span class="nt"&gt;-H&lt;/span&gt; &lt;span class="s2"&gt;"Content-Type: application/json"&lt;/span&gt; &lt;span class="se"&gt;\&lt;/span&gt;
  &lt;span class="nt"&gt;-d&lt;/span&gt; &lt;span class="s1"&gt;'{"userId": "user_123"}'&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;





&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight json"&gt;&lt;code&gt;&lt;span class="p"&gt;{&lt;/span&gt;&lt;span class="w"&gt;
  &lt;/span&gt;&lt;span class="nl"&gt;"human"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="kc"&gt;true&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt;&lt;span class="w"&gt;
  &lt;/span&gt;&lt;span class="nl"&gt;"confidence"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="mf"&gt;0.94&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt;&lt;span class="w"&gt;
  &lt;/span&gt;&lt;span class="nl"&gt;"token"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="s2"&gt;"h_verified_Kd3mP8luYMC2Mi1x"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt;&lt;span class="w"&gt;
  &lt;/span&gt;&lt;span class="nl"&gt;"pii_stored"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="kc"&gt;false&lt;/span&gt;&lt;span class="w"&gt;
&lt;/span&gt;&lt;span class="p"&gt;}&lt;/span&gt;&lt;span class="w"&gt;
&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;No UI shown to the user. No friction. No personal data stored.&lt;/p&gt;

&lt;h2&gt;
  
  
  Node.js SDK
&lt;/h2&gt;



&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;npm &lt;span class="nb"&gt;install&lt;/span&gt; @usehuma/node
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;





&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight typescript"&gt;&lt;code&gt;&lt;span class="k"&gt;import&lt;/span&gt; &lt;span class="nx"&gt;Huma&lt;/span&gt; &lt;span class="k"&gt;from&lt;/span&gt; &lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="s2"&gt;@usehuma/node&lt;/span&gt;&lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="p"&gt;;&lt;/span&gt;
&lt;span class="kd"&gt;const&lt;/span&gt; &lt;span class="nx"&gt;huma&lt;/span&gt; &lt;span class="o"&gt;=&lt;/span&gt; &lt;span class="k"&gt;new&lt;/span&gt; &lt;span class="nc"&gt;Huma&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="s2"&gt;huma_live_your_key&lt;/span&gt;&lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="p"&gt;);&lt;/span&gt;
&lt;span class="kd"&gt;const&lt;/span&gt; &lt;span class="nx"&gt;result&lt;/span&gt; &lt;span class="o"&gt;=&lt;/span&gt; &lt;span class="k"&gt;await&lt;/span&gt; &lt;span class="nx"&gt;huma&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;verify&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="s2"&gt;user_123&lt;/span&gt;&lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="p"&gt;);&lt;/span&gt;

&lt;span class="k"&gt;if &lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="nx"&gt;result&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nx"&gt;human&lt;/span&gt; &lt;span class="o"&gt;&amp;amp;&amp;amp;&lt;/span&gt; &lt;span class="nx"&gt;result&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nx"&gt;confidence&lt;/span&gt; &lt;span class="o"&gt;&amp;gt;&lt;/span&gt; &lt;span class="mf"&gt;0.7&lt;/span&gt;&lt;span class="p"&gt;)&lt;/span&gt; &lt;span class="p"&gt;{&lt;/span&gt;
  &lt;span class="c1"&gt;// ✅ Real human — let them through&lt;/span&gt;
&lt;span class="p"&gt;}&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;h2&gt;
  
  
  Try it yourself
&lt;/h2&gt;

&lt;p&gt;You can run the demo at humaverify.com/demo — no account needed. It takes ~6 seconds to collect signals and shows you your own confidence score.&lt;/p&gt;

&lt;p&gt;I'm Jaime, I built this solo in Mexico City. Launching today on Product Hunt — would love to hear your thoughts, especially from devs who've dealt with bot abuse on their own products.&lt;/p&gt;

</description>
      <category>webdev</category>
      <category>api</category>
      <category>security</category>
      <category>showdev</category>
    </item>
    <item>
      <title>I built a CAPTCHA alternative that uses behavioral signals to detect real humans</title>
      <dc:creator>Jaco</dc:creator>
      <pubDate>Thu, 26 Mar 2026 07:17:43 +0000</pubDate>
      <link>https://dev.to/jaco/i-built-a-captcha-alternative-that-uses-behavioral-signals-to-detect-real-humans-1g69</link>
      <guid>https://dev.to/jaco/i-built-a-captcha-alternative-that-uses-behavioral-signals-to-detect-real-humans-1g69</guid>
      <description>&lt;p&gt;Hey DEV community 👋&lt;/p&gt;

&lt;p&gt;I'm Jaime, solo founder from Mexico City. &lt;br&gt;
Just launched HUMA — a behavioral API that &lt;br&gt;
tells you if your users are real humans, &lt;br&gt;
without showing them any CAPTCHAs.&lt;/p&gt;

&lt;p&gt;→ humaverify.com&lt;/p&gt;

</description>
    </item>
  </channel>
</rss>
