{"rewrite":{"id":"r_fd3646d8c2cc771c1b1ac5ea","clusterId":"c_071ef85a4ea4cf9cd3a2c6c6","slug":"mozilla-proposes-pact-system-to-replace-captchas-with-anonymous-credentials","model":"deepseek-v4-flash","headline":"Mozilla Proposes Pact System to Replace Captchas With Anonymous Credentials","summary":"Mozilla has revealed the design of Private Access Control Tokens (PACT), an anonymous authentication system that lets websites verify human users without collecting personal data. PACT replaces CAPTCHAs and device attestation with rate-limiting credentials issued by trusted third parties like VPN providers or subscription services, aiming to reduce friction for legitimate visitors while blocking bots.","whyItMatters":"PACT proposes a fundamental shift in web authentication by decoupling human verification from identity and device fingerprinting, potentially ending the arms race between CAPTCHAs and generative AI.","webCardHtml":"\u003cp\u003eOn June 23, Mozilla published the design for Private Access Control Tokens (PACT), a system that lets websites verify a visitor is human without tracking who they are or what device they use. The proposal targets two problems: CAPTCHAs have become unreliable against generative AI, and privacy measures like blocking third-party cookies make legitimate users look suspicious. PACT replaces both with rate-limiting credentials. A user gets an endorsement from a service they already use, such as a VPN subscription or a long-standing email account. When visiting another site, the browser presents an anonymous credential to a moderator, which checks validity and whether the user has exceeded an access limit. The moderator never learns which service issued the endorsement. Mozilla argues this avoids the risks of device attestation, where a few large companies control which environments are trusted.\u003c/p\u003e","blueskyPost":"Mozilla proposes PACT, an anonymous credential system that lets websites verify humans without CAPTCHAs or device tracking. Users get tokens from services they already use, like a VPN subscription, and sites apply rate limits without knowing who they are.","twitterPost":"Mozilla reveals PACT, an anonymous authentication system that replaces CAPTCHAs with rate-limiting credentials from trusted services like VPNs. No device tracking, no identity collection.","threadsPost":null,"newsletterBlurb":"Mozilla has unveiled PACT, a system that uses anonymous credentials to verify human users without CAPTCHAs or device fingerprinting. Users receive tokens from services they already use, such as a VPN subscription, and websites apply rate limits without learning the user's identity. The proposal aims to solve the growing problem of CAPTCHAs being broken by generative AI while preserving privacy.","attributionJson":"[{\"source\":\"GIGAZINE\",\"url\":\"https://gigazine.net/news/20260624-mozilla-pact/\",\"title\":\"What is PACT, the human verification system that changes the CAPTCHA-filled web?\"}]","lintFlagsJson":null,"lintHits":0,"costUsd":0,"inputTokens":4165,"outputTokens":573,"status":"published","repairAttempts":0,"nextRepairAt":null,"factsAttemptedAt":1782590427,"createdAt":"2026-06-27T19:53:14.000Z","publishedAt":"2026-06-27T19:55:24.000Z","updatedAt":"2026-06-27T19:55:24.000Z"},"cluster":{"id":"c_071ef85a4ea4cf9cd3a2c6c6","canonicalTitle":"CAPTCHAだらけのウェブを変える人間証明システム「PACT」とは？","representativeArticleId":"a_dc69702f59d4072fc46abc75","sourceCount":1,"writtenSourceCount":1,"writeAttempts":0,"isSolo":true,"entitiesJson":"{\"anime_titles\":[],\"manga_titles\":[],\"work_titles\":[],\"studios\":[],\"people\":[],\"type\":\"news\",\"domain\":\"other\",\"is_roundup\":false}","contentType":"news","status":"published","firstSeenAt":"2026-06-24T10:00:00.000Z","lastSeenAt":"2026-06-24T10:00:00.000Z","updatedAt":"2026-06-27T19:55:24.000Z"},"attribution":[{"source":"GIGAZINE","url":"https://gigazine.net/news/20260624-mozilla-pact/","title":"CAPTCHAだらけのウェブを変える人間証明システム「PACT」とは？"}],"entities":{"anime_titles":[],"manga_titles":[],"work_titles":[],"studios":[],"people":[],"type":"news","domain":"other","is_roundup":false},"keyFacts":["Mozilla published the design for Private Access Control Tokens (PACT) on June 23.","PACT replaces CAPTCHAs and device attestation with rate-limiting credentials issued by trusted third parties.","A user gets an endorsement from a service they already use, such as a VPN subscription or a long-standing email account.","The moderator checks credential validity and access limits without learning which service issued the endorsement.","Mozilla argues PACT avoids the risks of device attestation, where a few large companies control which environments are trusted."]}