[wp-meta] [Making WordPress.org] #4739: Signup flow needs tweaking to reduce unconfirmed accounts

[Making WordPress.org]

#4739: Signup flow needs tweaking to reduce unconfirmed accounts
------------------------------------+----------------------
 Reporter:  dd32                    |      Owner:  dd32
     Type:  defect                  |     Status:  assigned
 Priority:  normal                  |  Milestone:
Component:  Login & Authentication  |   Keywords:
------------------------------------+----------------------
 After looking at the signup flow recently, there's a few things that have
 stood out as being needed:

 1. We shouldn't create users until after they've verified their email
 addresses, A lot of users never complete the signup process (Spam mostly
 I'd be willing to bet) or make typo's in their email addresses resulting
 in accounts that are never used.

 2. We should "upgrade" to reCaptcha v3 from the v2 invisible version we're
 currently using. Upgrading will allow us to gain access to the reCaptcha
 "score" of the user which can be used as a signal for spam and moderation
 tooling.
 We probably want to run v2 and v3 concurrently to tweak the scores used to
 prevent too much spam bypassing the captcha process currently in place.

-- 
Ticket URL: <https://meta.trac.wordpress.org/ticket/4739>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org