Passkey-first bot defense, with CAPTCHA only as fallback
Test the exact flow your users will experience: a fast passkey step-up first, then a lightweight behavioral challenge only when needed.
Verification flow
Passkey step-up
Confirm the user with a secure passkey action.
Fallback challenge
Triggered only when passkey is unavailable or policy requires it.
Result
Return a signed verification outcome to your backend.
Register a passkey first to try the passkey step-up demo.
Live fallback challenge
Scratch the surface to reveal the hidden shape.
Scratch the surface to begin verification.
Add Notabot in one script tag
- 1 Create a site key in the developer portal
- 2 Add the loader script to your page
- 3 Verify the result on your backend
<script
src="https://cdn.notabot.com/widget/v2/loader.js"
data-notabot-site-key="tk_your_site_key"
data-notabot-action="signup"
data-notabot-mount="#notabot-widget">
</script>
Privacy-first
When biometrics are used, biometric data stays on the user's device. Notabot only receives verification signals.
Frictionless by default
Most returning users can verify with a fast passkey step-up before any challenge is shown.
API-first
Signed JWT results, webhooks, and server-side verification built in.