Hmm, not sure about that. Easier, but still a pain to deal with. Why don't you let them try to login without any captcha or face recognition or whatever and only if they fail to login for X amount of times, pop up the human tests?
Perhaps you added this already, no clue, last StrongBox we worked with didn't have it, but it was an older version.
You're the expert in this field and i might have failed to take all aspects into consideration, so i'm sure you have a reason if you're not doing it that way, if so, do enlighten me.
__________________
<developer> MechBunny  / KVS / PHP / MySQL / HTML5 / CSS3 / jQuery 
Email: vlad [at] dangerouscoding.com
Telegram: @dangerouscoding
|