Captcha vs. Email confirmation vs. None

Stackoverflow had an interesting conversation about this email confirmation & captchas.

I think the jist of it can be summed up like this:

• captchas help protect against automated signups
• email confirmation helps protect against impersonation

I think though, the real question is - how to increase conversions.

Take a look at this article in a list apart that talks about how signup forms must die. A bit harsh, but the core idea is to engage the prospect, capture as little info as possible, then automate the signup.

The fewer the fields the better - and the later in the process, the better.

Here is another article - smashing magazine - about web form design best practices. (click to page 1 of the article - talks about the methodology and players)

To get to the specifics of your question, you could potentially simplify your signup to a single email field (password could be auto-generated, username could be added in profile) - if you believe that would make a difference.

[edit]

Some may say, jeesh, its just a simple field, why the bother? Take a look at this article from user interface engineering entitled the $300 million button. Takeaway: people resist giving information away and abandon signups if presented at the wrong time. Usability testing can confirm this - there are crowdsourced service providers (usertesting.com, for example) that can provide valuable input for under $100 (i think $29 / user x 3).

My favorite line from the article - usability reviewer: "I'm not here to enter into a relationship. I just want to buy something."

I would really think about making your app have zero signup and just have a "try it instantly" button that auto creates an anonymous account tracked with a cookie. On each page after that have a top of page div (like StackOverflow) that gives the user a reason and link to click through to create an account or click a survey about why they don't want to. Remove all obstacles for users to try your app for themselves.

I would definitely try to simplify that sign-up page. Since it's a credit card free registration why even ask for verification on email or password, if they mess it up they can sign up again. Also the trend these days seems to be to make the 2 sign-up fields with a larger font. You could add a passive verification email with additional marketing material etc.

Best of Luck, Doug

+1 to jimg's answer, which I think is excellent.

So I would love to simplify and the only place to simplify any further is the captcha.

How about removing that "security question" you have? IMHO these can often reduce security as the example of Sarah Palin's email hack illustrates.

Get rid of the the captcha and see what happens. If it doesn't cause a problem leave it off.

I'll add my perspective to the very good answers ahead of mine: For a "new" startup, if that can be a term, getting users/customers is paramount so a frictionless model of signing up is always a great idea. A colleague pointed me to sites like http://hunch.com/ and others including this one, where they don't require the user to sign up but over time it becomes addictive and people may be persuaded to sign up. If its interesting users will sign up over time.

We're also added/ adding 3rd party sign up methods as well, such as FB connect and OpenID (still a mystery to a lot of people and poorly marketed). It may be useful to add Google, Yahoo, Twitter as well. In other words most people online already have one of these accounts so go where the people are.

As far as Captcha goes for a new startup, maybe hold off and just go in and delete the robot sign-ups till it becomes a nuisance and when the growth happens with a lot of activity on the site implement a good Captcha system. I say good because there are some that have images so obscure that it defeats vision challenged humans and the last thing you want is to aggravate the user base.

I hope I added something useful.