reCAPTCHA update sparks privacy backlash on de-Googled Android

Google’s reCAPTCHA update, part of its “Cloud Fraud Defense” rollout, is drawing sharp criticism from privacy advocates. They say the new approach effectively locks out many users on de-Googled Android devices such as GrapheneOS and CalyxOS. Instead of classic CAPTCHA challenges, the verification flow now uses a QR code on the device. However, completing the process requires compatible Google Play Services (Android) or Apple/iOS services. Google says mobile verification needs Google Play Services 25.41.30+ or iOS 15.0+, and the prompt can be shown on desktop—meaning users may need a certified iOS/Android device for access. Key figures and reactions include: - Jameson Lopp (cypherpunk/security researcher) said privacy-conscious users are being “demoted” and that Google treats privacy as suspicious. - The GrapheneOS team argued the change enforces competition via Google/Apple-certified services, calling it anti-competition rather than security. - Brave co-founder Brendan Eich said services shouldn’t restrict people to specific hardware/OS choices. Critics also draw parallels to Google’s 2023 proposal for “Web Environment Integrity (WEI),” which was pushed back by standards bodies and later dropped—suggesting the same device-verification idea has returned in a different form. For crypto traders, this is primarily a tech-sector/Internet access policy story rather than a direct blockchain or token catalyst. Still, it can matter for privacy infrastructure users—an ecosystem issue that may influence sentiment around compliance, surveillance risk, and trust in web services.