Google re-Captcha verification error logging into Asda Mobile website

dosh37

I tried to login to my Asda Mobile account using Firefox but the login failed with a Google re-Captcha verification error (whatever that means).

I tried using MS Edge. Same problem.

It used to work ok but it looks like something has changed.

I discovered that if I went through the forgotten password recovery procedure I was initially able to login. However after logging out the problem returned.

I phoned customer services but they were no help.

Eventually I tried clearing the Firefox cache.

It now seems to be working when using Firefox.

So then I tried clearing the cache in MS Edge ('Clear Browsing Data' under Privacy Settings)  but I still get the same error.

Anyone else had this problem?

dosh37

Today the problem has returned.

I tried a different Win 10 PC. That did not help.

I discovered that if I connect via a VPN then after completing a captcha test (by entering a string of distorted characters displayed on an image), the login succeeds using both Firefox and Edge.

That suggests the problem may be related to my fixed IP address.

I have checked my IP address is not blacklisted.

I would have thought that if reCaptcha returns a validation error, the user should be presented with either a 'I am not a robot' checkbox or a conventional captcha test window (click on images of motocycle, bridges etc).

As things stands I can find no way to prove I am not a 'bot'.

mac.d

I've had no problems, just tried it using Opera and Edge (which I don't normally use), worked first time with both. 

virgo17

mac.d said:

I've had no problems, just tried it using Opera and Edge (which I don't normally use), worked first time with both. 

Ditto. Logged in yesterday with no problem using Chrome.

dosh37

I don't use Chrome (not installed).

I am talking about asda mobile PAYG login. That uses a different login page to the one used if you have a contract.

Over the weekend login worked using both Firefox & Edge.

This morning the problem has returned.

It seems to me there is something wrong with the way the asda mobile login page is constructed.

My understanding is that reCaptcha V3 is a Java Script from Google that attempts to identify bots by monitoring user behaviour (based on mouse movement etc) rather than asking the user to complete a Captcha puzzle every time. It provides a score between 0 and 1 that the website can use to determine if the user is human or a bot. If the score indicates a possible bot then the website should either display either a 'I am not a robot' checkbox or get the user to complete a Captcha puzzle challenge. Instead, the asda mobile website just displays a red 'Google reCAPTCHA validation has failed. Please refresh and try again!' message.

dosh37

I may have found the problem...

Firefox is configured to block third-party (cross-site) cookies as part of enhanced tracking protection.

There is a cookie named _GRECAPTCHA that ends up blocked as it originates from google rather than the asda website.

The mozilla support page below describes how to turn off ehnaced tracking protection for a specific website:-

https://support.mozilla.org/en-US/kb/third-party-cookies-firefox-tracking-protection

===

Enable third-party cookies for specific sites

Some websites may not work properly when third-party (cross-site) cookies are blocked. To turn off Enhanced Tracking Protection for a specific website:

1. Visit the website.
2. At the left of the address bar, click the shield icon .
3. At the top of the panel, toggle off the Enhanced Tracking Protection switch . This will disable Enhanced Tracking Protection for the site, causing the page to automatically reload and enable trackers.
   

Follow the same process to turn Enhanced Tracking Protection back on.

===

I suspect MS Edge may also configured to block third party cookies.

mac.d

It is the Asda mobile PAYG log in I'm using without any issues. Can log in on various devices using either chrome or edge. No idea about edge but I have chrome set to block third party cookies on my tablet and I've just logged in ok.

virgo17

dosh37 said:

I don't use Chrome (not installed).

I am talking about asda mobile PAYG login. That uses a different login page to the one used if you have a contract.

So am I. I am using the same PAYG login.

dosh37

There is still something flaky about the login.

The first time I tried this morning (using Firefox with third party cookies unblocked), the system looped straight back to the login page as it did on previous occasions.

It succeeded on the second attempt.

When I tried MS Edge, I initially had the same problem.

On the second attempt, a 'no entry' icon was displayed.

A while later the message 'These credentials do not match our records' appeared.

When I tried a third time, the login succeeded.

I was using copy & paste for the phone number and password in all three cases so I don't think I could have mis-typed either.

Update...

I tried removing the 'block third party cookies' option again on Firefox.

The 'Google reCAPTCHA validation has failed. Please refresh and try again!' message returned.

So it definitely makes a difference.

On MS Edge I was using 'Balanced' Tracking prevention. That only blocks cookies from sites not already visited. If I change to 'Strict' (blocks trackers from all sites), it breaks the login page completely. If I disable Tracking Protection completely, then login works as expected.

I should add that I have only experienced these problems with the asda mobile login page. I have never experienced these issues on other websites.