A small sum drawn as an image (for example 14 + 6) protects the Odoo sign-up form. Visitors type the result; the answer is checked on the server and never sent to the browser. It can also be switched on for the login form and for the password reset request. No Google or Cloudflare account, no API key, no call to an outside service.
Key Features
- Sign-up form protected — Every account created from the sign-up page must pass the sum, including posts sent directly to the page by a script.
- Optional on login — One setting adds the sum to the login form. A wrong answer stops the attempt before the password is checked.
- Optional on password reset — One setting adds the sum to the "Reset Password" request, against floods of reset e-mails.
- Checked on the server — The expected answer stays in the server session. It is used once: a solved image cannot be posted twice and every wrong answer needs a new image.
- Easy to read — Large dark characters, a refresh button for another sum, whole-number answers only and a numeric keyboard on phones.
- No outside service — The image is drawn by your Odoo server; nothing is sent to a third party and no key is needed.
Benefits
- Fewer fake accounts created by sign-up scripts
- Fewer scripted password guesses on the login form
- Works offline and on private networks
- Nothing to configure for the sign-up form
Ideal For
- Websites and portals with free sign-up open to visitors
- Companies that do not want Google or Cloudflare on their login pages
- Installations without outbound internet access
Technical Highlights
- Sign-up and reset checks in the auth_signup routes; login check through Odoo's own CAPTCHA hook
- One attempt per image; answer stored in the server-side session only
- Challenge built from the operating system's random generator
- Website Interaction for the image and the refresh button
- Depends on auth_signup only; Community and Enterprise
Supported Odoo Versions
- Odoo 19
- Odoo 20
