I have noticed that alot of sites have started to use image verification, you know where you have to read a picture with letters and/or numbers you have to enter besides your user id and password to log in. Can someone explain what it protects against? some real world scenario. I have heard something about that it protects against software that automatically logs in... Is that right? So if a malicious software logs in automatically on a site that doesnt have image verification, what do they do when they are in? (a forum for example) Do the result with image verification justify the inconvinience? (imo) or is image verification something site owners do just in case. Personally I find this very annoying and more often than not I just dont log in anymore. I use Roboform, not just because I wanted to use complicated passwords but also for the convenience it gives and these image verifications takes the latter away.