Cloudflare partners with Chrome, Firefox, Edge on privacy-first anti-bot tool

Cloudflare has teamed up with Mozilla Firefox, Google Chrome, and Microsoft Edge to build a new internet protocol that confirms whether web traffic comes from real humans without invading user privacy. The initiative, known as Private Access Control Tokens, aims to eliminate the need for CAPTCHAs and mandatory logins by issuing anonymous tokens that verify a visitor is human or a trusted device. This approach shifts the burden of proof away from users and onto the browser itself, creating a frictionless experience while blocking bots more effectively. By embedding verification directly into the browser, the protocol ensures no personal data is transmitted or stored during the process. The collaboration marks a significant step toward a privacy-first anti-bot standard that could reshape how websites distinguish legitimate users from malicious traffic. Each token is generated locally on the user’s device and can be presented to any participating website without revealing identity, browsing history, or device fingerprints. Cloudflare emphasized that the system is designed to be open and interoperable, inviting other browsers and service providers to adopt the standard. Early testing suggests the tokens can reduce reliance on traditional challenge-response tests, which have long been criticized for poor user experience and accessibility issues. The companies plan to submit the protocol to the Internet Engineering Task Force for formal standardization, paving the way for broader adoption across the web.