Cloudflare announces a collaboration with Mozilla Firefox, Google Chrome, and Microsoft Edge to develop a shared privacy-first protocol for reducing bot traffic. The initiative centers on “Private Access Control Tokens,” a system intended to help websites verify that incoming requests come from legitimate users. The protocol is designed to avoid tracking users while still providing assurance about whether web traffic is human.
The companies say the approach is meant to replace or reduce reliance on traditional bot-mitigation methods such as CAPTCHAs and forced logins. Instead, websites can use the tokens to determine access legitimacy without requiring intrusive user interactions. The project is framed as a cross-browser effort, with the participating browser vendors supporting the protocol so that tokens can be generated and validated consistently across different browsers.
All reports describe the effort as targeting bot fraud and improving website access control, while emphasizing privacy-preserving verification rather than user identification or ongoing tracking.
