Privacy proponents have criticized Google’s latest reCAPTCHA changes, arguing they could lock users of Android phones without Google Play Services out of websites that rely on the new verification flow.
Google-owned reCAPTCHA is used to verify that a user is human, usually by asking them to click on images of a bus or a fire hydrant.&nbsp;
Google announced “Cloud Fraud Defense” in late April, branding it “the next evolution of reCAPTCHA.”The latest update now presents users with a QR code to verify their humanity, but requires Google Play Services or the Apple equivalent to be running on the device, which isn’t present on “de-Googled” Android phones, such as those running GrapheneOS or CalyxOS.
“They’re directly participating in locking out competition via their own services,” <a href="https://x.com/GrapheneOS/status/2053507778719748465?s=20" rel="noopener noreferrer nofollow">said</a> the GrapheneOS team on Sunday, referring to the increasing use of Apple’s App Attest and Google’s Play Integrity.&nbsp;
<blockquote>
 “Requiring people to have an Apple device or Google-certified Android device is anti-competition, not security.”
</blockquote>
Privacy advocates often use de-Googled mobile operating systems to prevent data harvesting by Google software and have more freedom over what can be installed on their devices.
<h2 id="backlash-as-changes-impact-privacy-focused-users">Backlash as changes impact privacy-focused users&nbsp;</h2>
“Privacy-conscious internet users are being demoted from 2nd to 3rd class netizens,” <a href="https://x.com/lopp/status/2053493388071104719" rel="noopener noreferrer nofollow">said</a> Bitcoin security researcher and cypherpunk Jameson Lopp on Sunday.&nbsp;
“Google now treats privacy as suspicious behavior by default,” cybersecurity outlet International Cyber Digest <a href="https://x.com/intcyberdigest/status/2053259432054726872" rel="noopener noreferrer nofollow">said</a>.&nbsp;
The CEO and co-founder of the privacy-focused Brave browser, Brendan Eich, said services shouldn’t ban people from using arbitrary hardware and operating systems in the first place.&nbsp;
<blockquote>
 “Google’s security excuse is clearly bogus when they permit devices with no patches for ten years… It’s for enforcing their monopolies via GMS licensing, that’s all.”
</blockquote>
<img alt="Privacy advocates slam reCAPTCHA update they say locks out de-Googled phones" height="710" src="https://s3-images.ctmedia.io/media/content/pasted-image-59.jpeg" width="600">Source: <a href="https://x.com/lopp/status/2053493388071104719" rel="noopener noreferrer nofollow">Jameson Lopp</a>
<h2 id="desktop-browsers-initially-targeted">Desktop browsers initially targeted</h2>
To complete mobile verification, one must use a compatible mobile device that includes Google Play Services version 25.41.30 or greater or iOS version 15.0 or greater, <a href="https://support.google.com/recaptcha/answer/16609652" rel="noopener noreferrer nofollow">states</a> Google on its website.&nbsp;
The team at GrapheneOS explained that the move would impact Microsoft Windows or other <a href="https://cointelegraph.com/news/tether-releases-open-source-operating-system-for-bitcoin-miners" rel="noopener noreferrer nofollow">operating systems</a> not certified by <a href="https://cointelegraph.com/news/quantum-computers-need-far-less-power-crack-crypto-says-google" rel="noopener noreferrer nofollow">Google</a> or Apple. The prompt is primarily going to be shown on desktop platforms, but could be expanded, it said.
“Their plan requires having a certified Android device or iOS device to pass this on a desktop,” they added.&nbsp;
Related: <a href="https://cointelegraph.com/features/google-chrome-4gb-ai-model-crypto-security" rel="noopener noreferrer nofollow">Google Chrome’s 4GB AI model shows why browser trust matters for crypto security</a>
“Control over reCAPTCHA puts Google in a position where they can require having either iOS or a certified Android device to use an enormous amount of the web.”
<h2 id="google-engineers-spearheaded-a-controversial-proposal-in-2023">Google engineers spearheaded a controversial proposal in 2023</h2>
Google attempted something similar in 2023 with a system called “Web Environment Integrity (WEI),” which would have let the company decide which devices were “real enough” to access the web, wrote International Cyber Digest.
“Standards bodies and the public pushed back hard, and Google killed it. Three years later, the same idea is back, just hidden behind a QR code instead of a browser feature,” they added.&nbsp;
Magazine: <a href="https://cointelegraph-magazine.com/michael-saylor-strategy-bitcoin-sale-trump-media-quarterly-loss-hodlers-digest/" rel="noopener noreferrer nofollow">Strategy reveals why they would sell BTC, Trump Media posts loss: Hodler’s Digest</a>

Privacy advocates slam reCAPTCHA update they say locks out de-Googled phones

Table of Contents

Cointelegraph

Other articles published on May 11, 2026

Join our free newsletter for daily crypto updates!