"You did not pass the security check. Please try again." — How to try again?

[David N.]

A prospective new member is annoyed by the login form because it says "You did not pass the security check. Please try again." but he doesn't see a security check and does not know how to try again. What could have happened there? 

[Randy Calvert]

Do you have a captcha enabled?  It sounds like you have something other than just username/password but that additional challenge is not being provided or displayed properly. 

[Mark H]

Adding to what Randy said, also make sure your chosen captcha method has the correct "keys" in place. Client/Secret, etc. The symptom of the captcha interface not appearing there at all, is often caused by missing data in the settings.

[Marc]

Just checked this myself and Im not seeing that issue. Have you since resolved this?

[David N.]

2 hours ago, Randy Calvert said:

Do you have a captcha enabled?  It sounds like you have something other than just username/password but that additional challenge is not being provided or displayed properly. 

Only the invisible Captcha, and the site and secret key are the same as they used to be. 

1 hour ago, Marc Stridgen said:

Have you since resolved this?

No I haven't changed anything. Only one user reported this issue, I'm not sure if other ones are having it or not. 

[Mark H]

Please ask that member to try a different browser, or use their usual browser in "Private Mode" so that all browser extensions or plugins are disabled. It's possible the user's browser is blocking the captcha box from displaying.

Does that resolve the issue for that member?

[David N.]

1 hour ago, Mark H said:

Please ask that member to try a different browser, or use their usual browser in "Private Mode" so that all browser extensions or plugins are disabled. It's possible the user's browser is blocking the captcha box from displaying.

Does that resolve the issue for that member?

Unfortunately that person (he's not a member) has apparently given up and he isn't responding to my emails. 😔

[Mark H]

That's unfortunate. 😞

From your wording it seems they were the only one so affected, and if that's the case it almost has to be something on their end (or at least somewhere "outside" of your host's infrastructure, on the route to that registrant).

But if you can duplicate this, please let us know, with the steps to do so, and we'll definitely take a look.

[David N.]

Alright, thanks a lot. 

[David N.]

Ok so I experienced this myself today while trying to help someone else sign up. The user said they couldn't sign up and received "Error code: 2S129/1" so I decided to try to sign him up myself, and I got that same message ""You did not pass the security check. Please try again." - I waited a couple of seconds, tried to re-submit the form and it worked but said the account required approval. I approved the account and noticed it was spam check level 3, even though the user is legit - not a spammer. 

[Marc]

If you are testing this repeatedly, it's very likely you will indeed hit spam levels. You should always enter yourself into the whitelist if you are testing registrations.

[David N.]

Just now, Marc Stridgen said:

If you are testing this repeatedly, it's very likely you will indeed hit spam levels. You should always enter yourself into the whitelist if you are testing registrations.

Thank you. I did not test this repeatedly although I may have submitted the same form twice in rapid succession, would that have triggered the security check fail? Still, maybe the message should then be different because a user is likely to submit the same form twice (the same way I just did) and in that case they don't know what they're supposed to do in order to fix the issue. Maybe it should say "wait a minute then try to submit this form again"? 

Because the way the message is worded here, it seems like you're supposed to try something (to pass the security check) that isn't visible on the page.

[Marc]

34 minutes ago, Jamynee said:

Thank you. I did not test this repeatedly although I may have submitted the same form twice in rapid succession, would that have triggered the security check fail?

It may indeed do yes.

35 minutes ago, Jamynee said:

Still, maybe the message should then be different because a user is likely to submit the same form twice (the same way I just did) and in that case they don't know what they're supposed to do in order to fix the issue. Maybe it should say "wait a minute then try to submit this form again"? 

It would not provide advice on how to avoid it purposely. Unfortunately, that would defeat the object, as a bot could then read that and circumvent any prevention. If you are having problems with invisible recaptcha however, you could switch to another method.

I would ask, have you not tries switching to the new hcaptcha we added there? Its more effective

[David N.]

1 hour ago, Marc Stridgen said:

I would ask, have you not tries switching to the new hcaptcha we added there? Its more effective

I had not! I just did though, thanks a lot for reminding me. 

[Marc]

1 minute ago, Jamynee said:

I had not! I just did though, thanks a lot for reminding me. 

No problem at all. See how you get on with that. It does seem to be better at reducing spam too, so you may get a double win there

[SeNioR-]

18 hours ago, Marc Stridgen said:

It does seem to be better at reducing spam too, so you may get a double win there

That's true. But did you try to solve it? 😛 hCaptcha is slower and takes longer to resolve. It is annoying for the less patient. Personally, I prefer to stick with reCAPTCHA.

On 9/12/2022 at 8:05 PM, Jamynee said:

Unfortunately that person (he's not a member) has apparently given up and he isn't responding to my emails. 😔

Let this person disable all extensions, especially AdBlock or Privacy Badger, because the lack of reCAPTCHA means that it is simply blocked on the client side.

[Marc]

1 minute ago, SeNioR- said:

That's true. But did you try to solve it? 😛 hCaptcha is slower and takes longer to resolve. It is annoying for the less patient. Personally, I prefer to stick with reCAPTCHA.

quite simply, I'm unable to replicate the issue unfortunately. Also recaptcha itself appears to be returning it from what Im seeing above, so the issue would be with their service, rather than with the invision software. 

[David N.]

I think @SeNioR- meant, did you try to solve hCaptcha?

I did, and it's a bit slow but if it helps with spam I'm willing to give it a try. 

[Marc]

The answer would unfortunately be similar there also. Its not something over which we really have any control. 

[SeNioR-]

13 minutes ago, Marc Stridgen said:

quite simply, I'm unable to replicate the issue unfortunately.

You misunderstood me, everything works fine for me. The point is that it takes a long time to solve hCpatcha than reCAPTCHA 😄 

7 minutes ago, Jamynee said:

I think @SeNioR- meant, did you try to solve hCaptcha?

Yes, that's right 😛 

6 minutes ago, Marc Stridgen said:

The answer would unfortunately be similar there also. Its not something over which we really have any control. 

Of course, this is understandable. Anyway, any extra protection is good 🙂

Personally, I have the best experience with reCAPTCHA v2.

Edited September 20, 2022 by SeNioR-