Nawa Captcha — the self-hosted, accessible puzzle CAPTCHA

Playground

Pick a puzzle, or mix several and see how the server chooses between them, chains them, and what ends up in the pass token.

Want the real thing with a Node server? Open the Express demo in StackBlitz (runs npm run demo), or clone the repository and run it locally.

A CAPTCHA that looks like part of your product

A layered, glass-like card with real depth: a subtle perspective tilt that follows the pointer, parallax inside the puzzle frame, pieces that lift and click into place, and a verified state that draws its own checkmark. Six themes in light and dark plus high contrast, or let it pick up your Pelagic UI tokens automatically. Motion switches off for prefers-reduced-motion, every colour pair passes WCAG 2.2 AA, and forced colours are respected.

38 puzzle types

Every type works with mouse, touch and keyboard, and the text alternative is always one click away. The answer never reaches the browser: pictures are rendered on the server, and the solution is sealed inside the challenge token. "Blind guess" is the chance that a random answer passes one attempt; combine weak types with others (steps) or keep them for low-risk forms.

Why Nawa Captcha

Install

npm, yarn, pnpm and bun all work:

npm i nawa-captcha                # server, widget and every framework wrapper
npm i @nawa-captcha/server @nawa-captcha/widget
yarn add @nawa-captcha/react      # or @nawa-captcha/vue, @nawa-captcha/svelte, @nawa-captcha/angular

Server (Express) — choose your puzzles:

import { createNawaCaptcha } from '@nawa-captcha/server';
import { nawaCaptchaExpress, requireCaptcha } from '@nawa-captcha/server/express';

const guard = createNawaCaptcha({
  secret: process.env.NAWA_CAPTCHA_SECRET,
  types: ['slider', 'rotate-object', 'pairs', 'maze'],   // one, two or many
  mode: 'random',                                         // or 'sequence' | 'adaptive'
  perAction: { login: ['pow', 'slider'], signup: { types: ['maze', 'pairs'], steps: 2 } },
});
app.use('/captcha', express.json({ limit: '32kb' }), nawaCaptchaExpress(guard));
app.post('/login', requireCaptcha(guard, { expectedAction: 'login', maxAgeSec: 300 }), handler);

Browser (any framework) — types can only narrow the server's list:

<nawa-captcha site-key="main" endpoint="/captcha" action="login" types="slider,rotate-object"></nawa-captcha>

ASP.NET Core:

builder.Services.AddNawaCaptcha(builder.Configuration.GetSection("NawaCaptcha"));
app.MapPost("/api/contact", Handler).RequireNawaCaptcha("contact");

Supported versions

Nawa Captcha vs reCAPTCHA, hCaptcha and Turnstile

نوى كابتشا — كابتشا ألغاز مستضافة ذاتياً وسهلة الوصول

بديل مفتوح المصدر لـ reCAPTCHA: خادمك يُنشئ اللغز ويتحقق من الحل، دون تتبّع أو أطراف ثالثة. أكثر من ثلاثين نوعًا من الألغاز تختار منها ما تشاء، لغزًا واحدًا أو عدة ألغاز، لكل إجراء على حدة، مع إمكانية طلب لغزين متتاليين. دعم كامل للوحة المفاتيح وقارئات الشاشة مع سؤال نصي وتحدٍّ صوتي، والعربية والإنجليزية مع RTL، وستة أنماط ألوان بتصميم ثلاثي الأبعاد. يعمل مع React وVue وSvelte وAngular ويتحقق عبر Node.js أو ASP.NET Core. جرّب الملعب التفاعلي أعلاه باللغة العربية.