are there not stronger protections available for sign up such as cloudflare turnstile to prevent registrations in the first place?
There is an official captcha plugin:
As much as I dislike captcha the free tier:
up to one million requests per month
Might do the job? 
For now I have adjusted these settings, which will be annoying for legitimate new users, but we can manually increase new users trust level when it is clear they are genuine:
1 Like
Yeah I use hcaptcha on some websites, seems to work well enough
2 Likes
I’ve added a hcaptcha using a hcaptcha.com account using the same email address for account creation as the CoTech GitHub account, via GitHub SSO.
I’ve set it to always challenge with a hard difficulty, if anyone has issues with account creation please get in contact with someone via email so an admin can manually create an account, in addition we will add support for workers.coop SSO for account creation and logins.
Hopefully this will solve the bot spam…
2 Likes