Google has added documentation for a hand-gesture verification feature within reCAPTCHA, its bot-detection service for websites and apps. The feature can ask a user to allow camera access and perform a prompted hand action, after which Google processes video of the hand to extract landmark data. It is an optional reCAPTCHA capability, not evidence that Google is replacing image-based CAPTCHA tests across the internet.
The material distinction matters. Google’s documentation describes hand gestures as a feature that works when enabled by a reCAPTCHA user or site operator. It does not announce a blanket consumer rollout, say that every Google user will encounter it, or provide a timetable for replacing existing CAPTCHA challenges.
HIGHLIGHTS
The feature sits within Google Cloud Fraud Defense, the company’s current home for reCAPTCHA. Google says reCAPTCHA uses risk analysis and other signals to assess whether activity on a website or app appears to come from a person, a bot or another suspicious source. A challenge may be shown when the system needs additional evidence before allowing an action to proceed.
With hand-gesture verification enabled, the user must grant camera permission in their browser. Google then analyses one or more videos of the user’s hand while they perform actions or gestures. The system extracts hand-landmark data, including 21 hand-knuckle coordinates.
That is different from a conventional image challenge, where a user may be asked to identify objects in a grid. It is also different from reCAPTCHA v3, which can assess traffic without presenting a visible challenge and returns a score to the website operator.
The original framing overstates the change. Google’s documentation does not say that image-based CAPTCHA tests are being withdrawn or that hand gestures will become the default check for every website using reCAPTCHA.
Instead, Google says visual and audio challenges remain available for users with accessibility needs who cannot perform hand gestures. The company also says it is developing other accessible and secure verification methods.
This makes the gesture feature better understood as another challenge option within reCAPTCHA, rather than a wholesale replacement for CAPTCHA.
The commercial logic is clear even though Google has not published comparative performance figures for the hand-gesture feature. reCAPTCHA is used to help websites deal with spam, fake account creation, automated abuse, credential-stuffing attempts and fraudulent activity. Google describes its service as a risk-analysis product that can present a challenge or block an interaction when it detects suspicious behaviour.
A camera-based gesture check gives the system another form of evidence: a prompted action performed in real time. That may raise the cost and complexity of some automated attacks, but Google has not publicly demonstrated how much better the method performs than visual challenges, score-based checks or other existing controls.
That caveat should stay in the story. The feature’s purpose is documented; its real-world success rate has not been publicly quantified.
Camera access is the part likely to concern users most. Google says hand-gesture challenges require permission to access the camera, and that browser permissions can be managed by the user.
According to Google, the videos are not associated with a user’s identity, audio is never recorded, and the images or videos are deleted after the verification process. Google also says the hand-gesture data and related permissions are not transferred to third parties.
Those are Google’s stated data-handling commitments, rather than an independent privacy audit. The practical question for users is simpler: a site using this challenge may request camera access, and users should decide whether they are comfortable granting it or would rather use an available alternative.
There is no India-specific rollout announcement in Google’s documentation. Whether a person sees a hand-gesture check will depend on whether the website or app they are using has enabled the feature, as well as browser and camera access. Google’s published material does not establish that the feature is rolling out to all users in India, or to all reCAPTCHA-protected websites.
1. Is Google replacing CAPTCHA image tests with hand gestures?
No. Google has documented hand-gesture verification as a reCAPTCHA feature, while saying visual and audio challenges continue to be available for users who cannot complete the gesture check.
2. Does the hand-gesture check require camera access?
Yes. Google says users must grant browser permission for camera access before completing a hand-gesture challenge.
3. Does Google keep the recorded hand video?
Google says the video is not linked to a user’s identity, audio is not recorded, and hand images or videos are deleted after verification is complete.
- Google has documented a camera-based hand-gesture challenge for reCAPTCHA.
- The feature analyses videos of a user’s hand and extracts 21 hand-landmark coordinates.
- Google says audio is not recorded, the videos are not linked to a user’s identity, and hand images or videos are deleted after verification.
- Visual and audio challenges remain available for people who cannot complete a hand-gesture check.
- Google has not published effectiveness data or said that hand gestures will replace all existing CAPTCHA methods.
What Google’s hand-gesture verification does
With hand-gesture verification enabled, the user must grant camera permission in their browser. Google then analyses one or more videos of the user’s hand while they perform actions or gestures. The system extracts hand-landmark data, including 21 hand-knuckle coordinates.
That is different from a conventional image challenge, where a user may be asked to identify objects in a grid. It is also different from reCAPTCHA v3, which can assess traffic without presenting a visible challenge and returns a score to the website operator.
Google is not abandoning visual CAPTCHA challenges
Instead, Google says visual and audio challenges remain available for users with accessibility needs who cannot perform hand gestures. The company also says it is developing other accessible and secure verification methods.
This makes the gesture feature better understood as another challenge option within reCAPTCHA, rather than a wholesale replacement for CAPTCHA.
Why Google is adding another verification signal
A camera-based gesture check gives the system another form of evidence: a prompted action performed in real time. That may raise the cost and complexity of some automated attacks, but Google has not publicly demonstrated how much better the method performs than visual challenges, score-based checks or other existing controls.
That caveat should stay in the story. The feature’s purpose is documented; its real-world success rate has not been publicly quantified.
What Google says happens to the video
According to Google, the videos are not associated with a user’s identity, audio is never recorded, and the images or videos are deleted after the verification process. Google also says the hand-gesture data and related permissions are not transferred to third parties.
Those are Google’s stated data-handling commitments, rather than an independent privacy audit. The practical question for users is simpler: a site using this challenge may request camera access, and users should decide whether they are comfortable granting it or would rather use an available alternative.
Will users in India see it?
Frequently Asked Questions
No. Google has documented hand-gesture verification as a reCAPTCHA feature, while saying visual and audio challenges continue to be available for users who cannot complete the gesture check.
2. Does the hand-gesture check require camera access?
Yes. Google says users must grant browser permission for camera access before completing a hand-gesture challenge.
3. Does Google keep the recorded hand video?
Google says the video is not linked to a user’s identity, audio is not recorded, and hand images or videos are deleted after verification is complete.