diff --git a/apps/admin/package.json b/apps/admin/package.json
index e49cbdd..1f59920 100644
--- a/apps/admin/package.json
+++ b/apps/admin/package.json
@@ -14,7 +14,7 @@
   },
   "dependencies": {
     "@faker-js/faker": "^10.0.0",
-    "@lottiefiles/dotlottie-react": "^0.17.7",
+    "@lottiefiles/dotlottie-react": "^0.17.15",
     "@noble/curves": "^2.0.1",
     "@stripe/react-stripe-js": "^5.4.0",
     "@stripe/stripe-js": "^8.5.2",
diff --git a/apps/admin/public/assets/locales/en-US/auth.json b/apps/admin/public/assets/locales/en-US/auth.json
index e2decec..06eebf3 100644
--- a/apps/admin/public/assets/locales/en-US/auth.json
+++ b/apps/admin/public/assets/locales/en-US/auth.json
@@ -1,4 +1,11 @@
 {
+  "captcha": {
+    "clickToRefresh": "Click to refresh",
+    "noImage": "No Image",
+    "placeholder": "Enter captcha code...",
+    "refresh": "Refresh captcha",
+    "required": "Please enter captcha code"
+  },
   "check": {
     "description": "Verify your identity",
     "title": "Verify"
diff --git a/apps/admin/public/assets/locales/en-US/system.json b/apps/admin/public/assets/locales/en-US/system.json
index 7c67319..e362625 100644
--- a/apps/admin/public/assets/locales/en-US/system.json
+++ b/apps/admin/public/assets/locales/en-US/system.json
@@ -104,13 +104,20 @@
   },
   "userSecuritySettings": "User & Security",
   "verify": {
-    "description": "Configure Turnstile CAPTCHA and verification settings",
-    "enableLoginVerify": "Enable Verification on Login",
-    "enableLoginVerifyDescription": "When enabled, users must pass human verification during login",
-    "enablePasswordVerify": "Enable Verification on Password Reset",
-    "enablePasswordVerifyDescription": "When enabled, users must pass human verification during password reset",
-    "enableRegisterVerify": "Enable Verification on Registration",
-    "enableRegisterVerifyDescription": "When enabled, users must pass human verification during registration",
+    "captchaType": "Captcha Type",
+    "captchaTypeDescription": "Choose between local image captcha (offline) or Cloudflare Turnstile",
+    "captchaTypeLocal": "Local Image Captcha",
+    "captchaTypePlaceholder": "Select captcha type",
+    "captchaTypeTurnstile": "Cloudflare Turnstile",
+    "description": "Configure captcha type and verification settings",
+    "enableAdminLoginCaptcha": "Enable Admin Authentication Captcha",
+    "enableAdminLoginCaptchaDescription": "When enabled, administrators must pass captcha verification during login or password reset",
+    "enableUserLoginCaptcha": "Enable User Login Captcha",
+    "enableUserLoginCaptchaDescription": "When enabled, users must pass captcha verification during login",
+    "enableUserRegisterCaptcha": "Enable User Registration Captcha",
+    "enableUserRegisterCaptchaDescription": "When enabled, users must pass captcha verification during registration",
+    "enableUserResetPasswordCaptcha": "Enable User Password Reset Captcha",
+    "enableUserResetPasswordCaptchaDescription": "When enabled, users must pass captcha verification during password reset",
     "saveFailed": "Save Failed",
     "saveSuccess": "Save Successful",
     "title": "Security Verification",
diff --git a/apps/admin/public/assets/locales/en-US/user.json b/apps/admin/public/assets/locales/en-US/user.json
index 7dfb941..bb92767 100644
--- a/apps/admin/public/assets/locales/en-US/user.json
+++ b/apps/admin/public/assets/locales/en-US/user.json
@@ -147,5 +147,6 @@
   "address": "Address",
   "noNodesAvailable": "No nodes available",
   "nodeGroup": "Node Group",
-  "publicNodes": "Public Nodes"
+  "publicNodes": "Public Nodes",
+  "subscriptionNodes": "Subscription Nodes"
 }
diff --git a/apps/admin/public/assets/locales/zh-CN/auth.json b/apps/admin/public/assets/locales/zh-CN/auth.json
index 2a4c8fa..86abb3c 100644
--- a/apps/admin/public/assets/locales/zh-CN/auth.json
+++ b/apps/admin/public/assets/locales/zh-CN/auth.json
@@ -1,4 +1,11 @@
 {
+  "captcha": {
+    "clickToRefresh": "点击刷新",
+    "noImage": "无图片",
+    "placeholder": "请输入验证码...",
+    "refresh": "刷新验证码",
+    "required": "请输入验证码"
+  },
   "check": {
     "description": "验证您的身份",
     "title": "验证"
diff --git a/apps/admin/public/assets/locales/zh-CN/system.json b/apps/admin/public/assets/locales/zh-CN/system.json
index 3b3c01e..49d4134 100644
--- a/apps/admin/public/assets/locales/zh-CN/system.json
+++ b/apps/admin/public/assets/locales/zh-CN/system.json
@@ -104,13 +104,20 @@
   },
   "userSecuritySettings": "用户与安全",
   "verify": {
-    "description": "配置 Turnstile 验证码和验证设置",
-    "enableLoginVerify": "登录验证",
-    "enableLoginVerifyDescription": "启用后，用户登录时必须通过人机验证",
-    "enablePasswordVerify": "密码重置验证",
-    "enablePasswordVerifyDescription": "启用后，用户重置密码时必须通过人机验证",
-    "enableRegisterVerify": "注册验证",
-    "enableRegisterVerifyDescription": "启用后，用户注册时必须通过人机验证",
+    "captchaType": "验证码类型",
+    "captchaTypeDescription": "选择本地图形验证码（离线）或 Cloudflare Turnstile",
+    "captchaTypeLocal": "本地图形验证码",
+    "captchaTypePlaceholder": "选择验证码类型",
+    "captchaTypeTurnstile": "Cloudflare Turnstile",
+    "description": "配置验证码类型和验证设置",
+    "enableAdminLoginCaptcha": "启用管理端认证验证码",
+    "enableAdminLoginCaptchaDescription": "启用后，管理员登录或重置密码时必须通过验证码验证",
+    "enableUserLoginCaptcha": "启用用户端登录验证码",
+    "enableUserLoginCaptchaDescription": "启用后，用户登录时必须通过验证码验证",
+    "enableUserRegisterCaptcha": "启用用户端注册验证码",
+    "enableUserRegisterCaptchaDescription": "启用后，用户注册时必须通过验证码验证",
+    "enableUserResetPasswordCaptcha": "启用用户重置密码验证码",
+    "enableUserResetPasswordCaptchaDescription": "启用后，用户重置密码时必须通过验证码验证",
     "saveFailed": "保存失败",
     "saveSuccess": "保存成功",
     "title": "安全验证",
diff --git a/apps/admin/public/assets/locales/zh-CN/user.json b/apps/admin/public/assets/locales/zh-CN/user.json
index 1c2a0d0..5a93923 100644
--- a/apps/admin/public/assets/locales/zh-CN/user.json
+++ b/apps/admin/public/assets/locales/zh-CN/user.json
@@ -147,5 +147,6 @@
   "address": "地址",
   "noNodesAvailable": "无可用节点",
   "nodeGroup": "节点组",
-  "publicNodes": "公共节点"
+  "publicNodes": "公共节点",
+  "subscriptionNodes": "套餐节点"
 }
diff --git a/apps/admin/src/sections/auth/email/login-form.tsx b/apps/admin/src/sections/auth/email/login-form.tsx
index 9f9014a..f402ecf 100644
--- a/apps/admin/src/sections/auth/email/login-form.tsx
+++ b/apps/admin/src/sections/auth/email/login-form.tsx
@@ -10,12 +10,13 @@ import {
 import { Input } from "@workspace/ui/components/input";
 import { Icon } from "@workspace/ui/composed/icon";
 import type { Dispatch, SetStateAction } from "react";
-import { useRef } from "react";
+import { useRef, useState } from "react";
 import { useForm } from "react-hook-form";
 import { useTranslation } from "react-i18next";
 import { z } from "zod";
 import { useGlobalStore } from "@/stores/global";
 import CloudFlareTurnstile, { type TurnstileRef } from "../turnstile";
+import LocalCaptcha, { type LocalCaptchaRef } from "../local-captcha";
 
 export default function LoginForm({
   loading,
@@ -33,14 +34,25 @@ export default function LoginForm({
   const { t } = useTranslation("auth");
   const { common } = useGlobalStore();
   const { verify } = common;
+  const [captchaId, setCaptchaId] = useState("");
+
+  const isTurnstile = verify.captcha_type === "turnstile";
+  const isLocal = verify.captcha_type === "local";
+  const captchaEnabled = verify.enable_admin_login_captcha;
 
   const formSchema = z.object({
-    email: z.email(t("login.email", "Email")),
+    email: z
+      .string()
+      .email(t("login.email", "Please enter a valid email address")),
     password: z.string(),
     cf_token:
-      verify.enable_login_verify && verify.turnstile_site_key
+      captchaEnabled && isTurnstile && verify.turnstile_site_key
         ? z.string()
         : z.string().optional(),
+    captcha_code:
+      captchaEnabled && isLocal
+        ? z.string().min(1, t("captcha.required", "Please enter captcha code"))
+        : z.string().optional(),
   });
   const form = useForm<z.infer<typeof formSchema>>({
     resolver: zodResolver(formSchema),
@@ -48,11 +60,17 @@ export default function LoginForm({
   });
 
   const turnstile = useRef<TurnstileRef>(null);
+  const localCaptcha = useRef<LocalCaptchaRef>(null);
   const handleSubmit = form.handleSubmit((data) => {
     try {
+      // Add captcha_id for local captcha
+      if (isLocal && captchaEnabled) {
+        (data as any).captcha_id = captchaId;
+      }
       onSubmit(data);
     } catch (_error) {
       turnstile.current?.reset();
+      localCaptcha.current?.reset();
     }
   });
 
@@ -98,7 +116,7 @@ export default function LoginForm({
               </FormItem>
             )}
           />
-          {verify.enable_login_verify && (
+          {captchaEnabled && isTurnstile && (
             <FormField
               control={form.control}
               name="cf_token"
@@ -116,6 +134,24 @@ export default function LoginForm({
               )}
             />
           )}
+          {captchaEnabled && isLocal && (
+            <FormField
+              control={form.control}
+              name="captcha_code"
+              render={({ field }) => (
+                <FormItem>
+                  <FormControl>
+                    <LocalCaptcha
+                      {...field}
+                      ref={localCaptcha}
+                      onCaptchaIdChange={setCaptchaId}
+                    />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+          )}
           <Button disabled={loading} type="submit">
             {loading && <Icon className="animate-spin" icon="mdi:loading" />}
             {t("login.title", "Login")}
diff --git a/apps/admin/src/sections/auth/email/reset-form.tsx b/apps/admin/src/sections/auth/email/reset-form.tsx
index d8e42ff..1fc47ef 100644
--- a/apps/admin/src/sections/auth/email/reset-form.tsx
+++ b/apps/admin/src/sections/auth/email/reset-form.tsx
@@ -10,13 +10,14 @@ import {
 import { Input } from "@workspace/ui/components/input";
 import { Icon } from "@workspace/ui/composed/icon";
 import type { Dispatch, SetStateAction } from "react";
-import { useRef } from "react";
+import { useRef, useState } from "react";
 import { useForm } from "react-hook-form";
 import { useTranslation } from "react-i18next";
 import { z } from "zod";
 import { useGlobalStore } from "@/stores/global";
 import SendCode from "../send-code";
 import CloudFlareTurnstile, { type TurnstileRef } from "../turnstile";
+import LocalCaptcha, { type LocalCaptchaRef } from "../local-captcha";
 
 export default function ResetForm({
   loading,
@@ -35,15 +36,26 @@ export default function ResetForm({
 
   const { common } = useGlobalStore();
   const { verify, auth } = common;
+  const [captchaId, setCaptchaId] = useState("");
+
+  const isTurnstile = verify.captcha_type === "turnstile";
+  const isLocal = verify.captcha_type === "local";
+  const captchaEnabled = verify.enable_user_reset_password_captcha;
 
   const formSchema = z.object({
-    email: z.email(t("reset.email", "Email")),
+    email: z
+      .string()
+      .email(t("reset.email", "Please enter a valid email address")),
     password: z.string(),
     code: auth?.email?.enable_verify ? z.string() : z.string().nullish(),
     cf_token:
-      verify.enable_register_verify && verify.turnstile_site_key
+      captchaEnabled && isTurnstile && verify.turnstile_site_key
         ? z.string()
         : z.string().nullish(),
+    captcha_code:
+      captchaEnabled && isLocal
+        ? z.string().min(1, t("captcha.required", "Please enter captcha code"))
+        : z.string().nullish(),
   });
   const form = useForm<z.infer<typeof formSchema>>({
     resolver: zodResolver(formSchema),
@@ -51,11 +63,17 @@ export default function ResetForm({
   });
 
   const turnstile = useRef<TurnstileRef>(null);
+  const localCaptcha = useRef<LocalCaptchaRef>(null);
   const handleSubmit = form.handleSubmit((data) => {
     try {
+      // Add captcha_id for local captcha
+      if (isLocal && captchaEnabled) {
+        (data as any).captcha_id = captchaId;
+      }
       onSubmit(data);
     } catch (_error) {
       turnstile.current?.reset();
+      localCaptcha.current?.reset();
     }
   });
 
@@ -128,7 +146,7 @@ export default function ResetForm({
               </FormItem>
             )}
           />
-          {verify.enable_reset_password_verify && (
+          {captchaEnabled && isTurnstile && (
             <FormField
               control={form.control}
               name="cf_token"
@@ -146,6 +164,24 @@ export default function ResetForm({
               )}
             />
           )}
+          {captchaEnabled && isLocal && (
+            <FormField
+              control={form.control}
+              name="captcha_code"
+              render={({ field }) => (
+                <FormItem>
+                  <FormControl>
+                    <LocalCaptcha
+                      {...field}
+                      ref={localCaptcha}
+                      onCaptchaIdChange={setCaptchaId}
+                    />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+          )}
           <Button disabled={loading} type="submit">
             {loading && <Icon className="animate-spin" icon="mdi:loading" />}
             {t("reset.title", "Reset Password")}
diff --git a/apps/admin/src/sections/auth/local-captcha.tsx b/apps/admin/src/sections/auth/local-captcha.tsx
new file mode 100644
index 0000000..98ca959
--- /dev/null
+++ b/apps/admin/src/sections/auth/local-captcha.tsx
@@ -0,0 +1,95 @@
+import { Button } from "@workspace/ui/components/button";
+import { Input } from "@workspace/ui/components/input";
+import { Icon } from "@workspace/ui/composed/icon";
+import { adminGenerateCaptcha } from "@workspace/ui/services/admin/auth";
+import { forwardRef, useEffect, useImperativeHandle, useState } from "react";
+import { useTranslation } from "react-i18next";
+
+export interface LocalCaptchaRef {
+  reset: () => void;
+}
+
+interface LocalCaptchaProps {
+  value?: string | null;
+  onChange?: (value: string) => void;
+  onCaptchaIdChange?: (id: string) => void;
+}
+
+const LocalCaptcha = forwardRef<LocalCaptchaRef, LocalCaptchaProps>(
+  ({ value, onChange, onCaptchaIdChange }, ref) => {
+    const { t } = useTranslation("auth");
+    const [captchaImage, setCaptchaImage] = useState("");
+    const [loading, setLoading] = useState(false);
+
+    const fetchCaptcha = async () => {
+      setLoading(true);
+      try {
+        const res = await adminGenerateCaptcha();
+        const captchaData = res.data?.data;
+        if (captchaData) {
+          setCaptchaImage(captchaData.image);
+          onCaptchaIdChange?.(captchaData.id);
+        }
+      } catch (error) {
+        console.error("Failed to generate captcha:", error);
+      } finally {
+        setLoading(false);
+      }
+    };
+
+    useEffect(() => {
+      fetchCaptcha();
+    }, []);
+
+    useImperativeHandle(ref, () => ({
+      reset: () => {
+        onChange?.("");
+        fetchCaptcha();
+      },
+    }));
+
+    return (
+      <div className="flex gap-2">
+        <Input
+          placeholder={t("captcha.placeholder", "Enter captcha code...")}
+          value={value || ""}
+          onChange={(e) => onChange?.(e.target.value)}
+          className="flex-1"
+        />
+        <div className="relative h-10 w-32 flex-shrink-0">
+          {loading ? (
+            <div className="flex h-full items-center justify-center bg-muted">
+              <Icon className="animate-spin" icon="mdi:loading" />
+            </div>
+          ) : captchaImage ? (
+            <img
+              src={captchaImage}
+              alt="captcha"
+              className="h-full w-full cursor-pointer object-contain"
+              onClick={fetchCaptcha}
+              title={t("captcha.clickToRefresh", "Click to refresh")}
+            />
+          ) : (
+            <div className="flex h-full items-center justify-center bg-muted text-xs text-muted-foreground">
+              {t("captcha.noImage", "No Image")}
+            </div>
+          )}
+        </div>
+        <Button
+          type="button"
+          variant="outline"
+          size="icon"
+          onClick={fetchCaptcha}
+          disabled={loading}
+          title={t("captcha.refresh", "Refresh captcha")}
+        >
+          <Icon icon="mdi:refresh" />
+        </Button>
+      </div>
+    );
+  }
+);
+
+LocalCaptcha.displayName = "LocalCaptcha";
+
+export default LocalCaptcha;
diff --git a/apps/admin/src/sections/system/user-security/verify-form.tsx b/apps/admin/src/sections/system/user-security/verify-form.tsx
index 18c71d7..d4593a9 100644
--- a/apps/admin/src/sections/system/user-security/verify-form.tsx
+++ b/apps/admin/src/sections/system/user-security/verify-form.tsx
@@ -11,6 +11,13 @@ import {
   FormMessage,
 } from "@workspace/ui/components/form";
 import { ScrollArea } from "@workspace/ui/components/scroll-area";
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@workspace/ui/components/select";
 import {
   Sheet,
   SheetContent,
@@ -33,11 +40,13 @@ import { toast } from "sonner";
 import { z } from "zod";
 
 const verifySchema = z.object({
+  captcha_type: z.string().optional(),
   turnstile_site_key: z.string().optional(),
   turnstile_secret: z.string().optional(),
-  enable_register_verify: z.boolean().optional(),
-  enable_login_verify: z.boolean().optional(),
-  enable_reset_password_verify: z.boolean().optional(),
+  enable_user_login_captcha: z.boolean().optional(),
+  enable_user_register_captcha: z.boolean().optional(),
+  enable_admin_login_captcha: z.boolean().optional(),
+  enable_user_reset_password_captcha: z.boolean().optional(),
 });
 
 type VerifyFormData = z.infer<typeof verifySchema>;
@@ -59,11 +68,13 @@ export default function VerifyConfig() {
   const form = useForm<VerifyFormData>({
     resolver: zodResolver(verifySchema),
     defaultValues: {
+      captcha_type: "local",
       turnstile_site_key: "",
       turnstile_secret: "",
-      enable_register_verify: false,
-      enable_login_verify: false,
-      enable_reset_password_verify: false,
+      enable_user_login_captcha: false,
+      enable_user_register_captcha: false,
+      enable_admin_login_captcha: false,
+      enable_user_reset_password_captcha: false,
     },
   });
 
@@ -126,26 +137,42 @@ export default function VerifyConfig() {
             >
               <FormField
                 control={form.control}
-                name="turnstile_site_key"
+                name="captcha_type"
                 render={({ field }) => (
                   <FormItem>
                     <FormLabel>
-                      {t("verify.turnstileSiteKey", "Turnstile Site Key")}
+                      {t("verify.captchaType", "Captcha Type")}
                     </FormLabel>
                     <FormControl>
-                      <EnhancedInput
+                      <Select
                         onValueChange={field.onChange}
-                        placeholder={t(
-                          "verify.turnstileSiteKeyPlaceholder",
-                          "Enter Turnstile site key"
-                        )}
                         value={field.value}
-                      />
+                      >
+                        <SelectTrigger>
+                          <SelectValue
+                            placeholder={t(
+                              "verify.captchaTypePlaceholder",
+                              "Select captcha type"
+                            )}
+                          />
+                        </SelectTrigger>
+                        <SelectContent>
+                          <SelectItem value="local">
+                            {t("verify.captchaTypeLocal", "Local Image Captcha")}
+                          </SelectItem>
+                          <SelectItem value="turnstile">
+                            {t(
+                              "verify.captchaTypeTurnstile",
+                              "Cloudflare Turnstile"
+                            )}
+                          </SelectItem>
+                        </SelectContent>
+                      </Select>
                     </FormControl>
                     <FormDescription>
                       {t(
-                        "verify.turnstileSiteKeyDescription",
-                        "Cloudflare Turnstile site key for frontend verification"
+                        "verify.captchaTypeDescription",
+                        "Choose between local image captcha (offline) or Cloudflare Turnstile"
                       )}
                     </FormDescription>
                     <FormMessage />
@@ -153,45 +180,78 @@ export default function VerifyConfig() {
                 )}
               />
 
-              <FormField
-                control={form.control}
-                name="turnstile_secret"
-                render={({ field }) => (
-                  <FormItem>
-                    <FormLabel>
-                      {t("verify.turnstileSecret", "Turnstile Secret Key")}
-                    </FormLabel>
-                    <FormControl>
-                      <EnhancedInput
-                        onValueChange={field.onChange}
-                        placeholder={t(
-                          "verify.turnstileSecretPlaceholder",
-                          "Enter Turnstile secret key"
-                        )}
-                        type="password"
-                        value={field.value}
-                      />
-                    </FormControl>
-                    <FormDescription>
-                      {t(
-                        "verify.turnstileSecretDescription",
-                        "Cloudflare Turnstile secret key for backend verification"
-                      )}
-                    </FormDescription>
-                    <FormMessage />
-                  </FormItem>
-                )}
-              />
+              {form.watch("captcha_type") === "turnstile" && (
+                <>
+                  <FormField
+                    control={form.control}
+                    name="turnstile_site_key"
+                    render={({ field }) => (
+                      <FormItem>
+                        <FormLabel>
+                          {t("verify.turnstileSiteKey", "Turnstile Site Key")}
+                        </FormLabel>
+                        <FormControl>
+                          <EnhancedInput
+                            onValueChange={field.onChange}
+                            placeholder={t(
+                              "verify.turnstileSiteKeyPlaceholder",
+                              "Enter Turnstile site key"
+                            )}
+                            value={field.value}
+                          />
+                        </FormControl>
+                        <FormDescription>
+                          {t(
+                            "verify.turnstileSiteKeyDescription",
+                            "Cloudflare Turnstile site key for frontend verification"
+                          )}
+                        </FormDescription>
+                        <FormMessage />
+                      </FormItem>
+                    )}
+                  />
+
+                  <FormField
+                    control={form.control}
+                    name="turnstile_secret"
+                    render={({ field }) => (
+                      <FormItem>
+                        <FormLabel>
+                          {t("verify.turnstileSecret", "Turnstile Secret Key")}
+                        </FormLabel>
+                        <FormControl>
+                          <EnhancedInput
+                            onValueChange={field.onChange}
+                            placeholder={t(
+                              "verify.turnstileSecretPlaceholder",
+                              "Enter Turnstile secret key"
+                            )}
+                            type="password"
+                            value={field.value}
+                          />
+                        </FormControl>
+                        <FormDescription>
+                          {t(
+                            "verify.turnstileSecretDescription",
+                            "Cloudflare Turnstile secret key for backend verification"
+                          )}
+                        </FormDescription>
+                        <FormMessage />
+                      </FormItem>
+                    )}
+                  />
+                </>
+              )}
 
               <FormField
                 control={form.control}
-                name="enable_register_verify"
+                name="enable_user_login_captcha"
                 render={({ field }) => (
                   <FormItem>
                     <FormLabel>
                       {t(
-                        "verify.enableRegisterVerify",
-                        "Enable Verification on Registration"
+                        "verify.enableUserLoginCaptcha",
+                        "Enable User Login Captcha"
                       )}
                     </FormLabel>
                     <FormControl>
@@ -203,8 +263,8 @@ export default function VerifyConfig() {
                     </FormControl>
                     <FormDescription>
                       {t(
-                        "verify.enableRegisterVerifyDescription",
-                        "When enabled, users must pass human verification during registration"
+                        "verify.enableUserLoginCaptchaDescription",
+                        "When enabled, users must pass captcha verification during login"
                       )}
                     </FormDescription>
                     <FormMessage />
@@ -214,13 +274,13 @@ export default function VerifyConfig() {
 
               <FormField
                 control={form.control}
-                name="enable_login_verify"
+                name="enable_user_register_captcha"
                 render={({ field }) => (
                   <FormItem>
                     <FormLabel>
                       {t(
-                        "verify.enableLoginVerify",
-                        "Enable Verification on Login"
+                        "verify.enableUserRegisterCaptcha",
+                        "Enable User Registration Captcha"
                       )}
                     </FormLabel>
                     <FormControl>
@@ -232,8 +292,8 @@ export default function VerifyConfig() {
                     </FormControl>
                     <FormDescription>
                       {t(
-                        "verify.enableLoginVerifyDescription",
-                        "When enabled, users must pass human verification during login"
+                        "verify.enableUserRegisterCaptchaDescription",
+                        "When enabled, users must pass captcha verification during registration"
                       )}
                     </FormDescription>
                     <FormMessage />
@@ -243,13 +303,13 @@ export default function VerifyConfig() {
 
               <FormField
                 control={form.control}
-                name="enable_reset_password_verify"
+                name="enable_user_reset_password_captcha"
                 render={({ field }) => (
                   <FormItem>
                     <FormLabel>
                       {t(
-                        "verify.enablePasswordVerify",
-                        "Enable Verification on Password Reset"
+                        "verify.enableUserResetPasswordCaptcha",
+                        "Enable User Password Reset Captcha"
                       )}
                     </FormLabel>
                     <FormControl>
@@ -261,8 +321,37 @@ export default function VerifyConfig() {
                     </FormControl>
                     <FormDescription>
                       {t(
-                        "verify.enablePasswordVerifyDescription",
-                        "When enabled, users must pass human verification during password reset"
+                        "verify.enableUserResetPasswordCaptchaDescription",
+                        "When enabled, users must pass captcha verification during password reset"
+                      )}
+                    </FormDescription>
+                    <FormMessage />
+                  </FormItem>
+                )}
+              />
+
+              <FormField
+                control={form.control}
+                name="enable_admin_login_captcha"
+                render={({ field }) => (
+                  <FormItem>
+                    <FormLabel>
+                      {t(
+                        "verify.enableAdminLoginCaptcha",
+                        "Enable Admin Authentication Captcha"
+                      )}
+                    </FormLabel>
+                    <FormControl>
+                      <Switch
+                        checked={field.value}
+                        className="!mt-0 float-end"
+                        onCheckedChange={field.onChange}
+                      />
+                    </FormControl>
+                    <FormDescription>
+                      {t(
+                        "verify.enableAdminLoginCaptchaDescription",
+                        "When enabled, administrators must pass captcha verification during login"
                       )}
                     </FormDescription>
                     <FormMessage />
diff --git a/apps/admin/src/sections/user/index.tsx b/apps/admin/src/sections/user/index.tsx
index a8343f6..67b613b 100644
--- a/apps/admin/src/sections/user/index.tsx
+++ b/apps/admin/src/sections/user/index.tsx
@@ -477,7 +477,12 @@ function PreviewNodesDialog({ userId }: { userId: number }) {
                 {previewData.node_groups.map((group) => (
                   <div key={group.id}>
                     <h4 className="text-sm font-semibold mb-2">
-                      {group.name || (group.id === 0 ? t("publicNodes", "Public Nodes") : `${t("nodeGroup", "Node Group")} ${group.id}`)}
+                      {group.name ||
+                        (group.id === -1
+                          ? t("subscriptionNodes", "Subscription Nodes")
+                          : group.id === 0
+                            ? t("publicNodes", "Public Nodes")
+                            : `${t("nodeGroup", "Node Group")} ${group.id}`)}
                     </h4>
                     {group.nodes && group.nodes.length > 0 ? (
                       <table className="w-full text-sm">
diff --git a/apps/admin/src/stores/global.tsx b/apps/admin/src/stores/global.tsx
index 9660293..8bdcfef 100644
--- a/apps/admin/src/stores/global.tsx
+++ b/apps/admin/src/stores/global.tsx
@@ -49,9 +49,14 @@ export const useGlobalStore = create<GlobalStore>((set, get) => ({
     },
     verify: {
       turnstile_site_key: "",
+      captcha_type: "turnstile",
       enable_login_verify: false,
       enable_register_verify: false,
       enable_reset_password_verify: false,
+      enable_user_login_captcha: false,
+      enable_user_register_captcha: false,
+      enable_user_reset_password_captcha: false,
+      enable_admin_login_captcha: false,
     },
     auth: {
       mobile: {
diff --git a/apps/user/package.json b/apps/user/package.json
index c6ce1dc..22af014 100644
--- a/apps/user/package.json
+++ b/apps/user/package.json
@@ -14,7 +14,7 @@
   },
   "dependencies": {
     "@faker-js/faker": "^10.0.0",
-    "@lottiefiles/dotlottie-react": "^0.17.7",
+    "@lottiefiles/dotlottie-react": "^0.17.15",
     "@stripe/react-stripe-js": "^5.4.0",
     "@stripe/stripe-js": "^8.5.2",
     "@tailwindcss/vite": "^4.0.6",
diff --git a/apps/user/public/assets/locales.zip b/apps/user/public/assets/locales.zip
new file mode 100644
index 0000000..0fadcad
Binary files /dev/null and b/apps/user/public/assets/locales.zip differ
diff --git a/apps/user/public/assets/locales/en-US/auth.json b/apps/user/public/assets/locales/en-US/auth.json
index 4e1baeb..f45fc03 100644
--- a/apps/user/public/assets/locales/en-US/auth.json
+++ b/apps/user/public/assets/locales/en-US/auth.json
@@ -1,12 +1,21 @@
 {
   "authenticating": "Authenticating...",
   "binding": "Binding account...",
+  "captcha": {
+    "clickToRefresh": "Click to refresh",
+    "noImage": "No Image",
+    "placeholder": "Enter captcha code...",
+    "refresh": "Refresh captcha",
+    "required": "Please enter captcha code"
+  },
   "get": "Get Code",
   "login": {
     "codeLogin": "Login with Code",
     "email": "Please enter a valid email address",
+    "emailPlaceholder": "Enter your email...",
     "forgotPassword": "Forgot Password?",
     "passwordLogin": "Login with Password",
+    "passwordPlaceholder": "Enter your password...",
     "registerAccount": "Register Account",
     "success": "Login successful!",
     "title": "Login"
@@ -17,19 +26,28 @@
   },
   "privacyPolicy": "Privacy Policy",
   "register": {
+    "areaCodePlaceholder": "Area code...",
+    "codePlaceholder": "Enter code...",
     "email": "Please enter a valid email address",
+    "emailPlaceholder": "Enter your email...",
     "existingAccount": "Already have an account?",
     "invite": "Invitation Code (Optional)",
     "message": "Registration is currently disabled",
     "passwordMismatch": "Passwords do not match",
+    "passwordPlaceholder": "Enter your password...",
+    "repeatPasswordPlaceholder": "Enter password again...",
     "success": "Registration successful!",
     "switchToLogin": "Login",
+    "telephonePlaceholder": "Enter your telephone...",
     "title": "Register",
     "whitelist": "This email domain is not in the whitelist"
   },
   "reset": {
+    "codePlaceholder": "Enter code...",
     "email": "Please enter a valid email address",
+    "emailPlaceholder": "Enter your email...",
     "existingAccount": "Remember your password?",
+    "passwordPlaceholder": "Enter your new password...",
     "success": "Password reset successful!",
     "switchToLogin": "Login",
     "title": "Reset Password"
diff --git a/apps/user/public/assets/locales/zh-CN/auth.json b/apps/user/public/assets/locales/zh-CN/auth.json
index 6fd7c9c..e408d59 100644
--- a/apps/user/public/assets/locales/zh-CN/auth.json
+++ b/apps/user/public/assets/locales/zh-CN/auth.json
@@ -1,12 +1,21 @@
 {
   "authenticating": "正在认证...",
   "binding": "正在绑定账号...",
+  "captcha": {
+    "clickToRefresh": "点击刷新",
+    "noImage": "无图片",
+    "placeholder": "请输入验证码...",
+    "refresh": "刷新验证码",
+    "required": "请输入验证码"
+  },
   "get": "获取验证码",
   "login": {
     "codeLogin": "验证码登录",
     "email": "请输入有效的邮箱地址",
+    "emailPlaceholder": "请输入邮箱...",
     "forgotPassword": "忘记密码？",
     "passwordLogin": "密码登录",
+    "passwordPlaceholder": "请输入密码...",
     "registerAccount": "注册账号",
     "success": "登录成功！",
     "title": "登录"
@@ -17,19 +26,28 @@
   },
   "privacyPolicy": "隐私政策",
   "register": {
+    "areaCodePlaceholder": "区号...",
+    "codePlaceholder": "请输入验证码...",
     "email": "请输入有效的邮箱地址",
+    "emailPlaceholder": "请输入邮箱...",
     "existingAccount": "已有账号？",
     "invite": "邀请码（可选）",
     "message": "注册功能暂时不可用",
     "passwordMismatch": "两次密码输入不一致",
+    "passwordPlaceholder": "请输入密码...",
+    "repeatPasswordPlaceholder": "请再次输入密码...",
     "success": "注册成功！",
     "switchToLogin": "登录",
+    "telephonePlaceholder": "请输入手机号...",
     "title": "注册",
     "whitelist": "该邮箱域名不在白名单中"
   },
   "reset": {
+    "codePlaceholder": "请输入验证码...",
     "email": "请输入有效的邮箱地址",
+    "emailPlaceholder": "请输入邮箱...",
     "existingAccount": "记得密码了？",
+    "passwordPlaceholder": "请输入新密码...",
     "success": "密码重置成功！",
     "switchToLogin": "登录",
     "title": "重置密码"
diff --git a/apps/user/src/sections/auth/email/login-form.tsx b/apps/user/src/sections/auth/email/login-form.tsx
index 69e8045..8dff1b2 100644
--- a/apps/user/src/sections/auth/email/login-form.tsx
+++ b/apps/user/src/sections/auth/email/login-form.tsx
@@ -10,13 +10,14 @@ import {
 import { Input } from "@workspace/ui/components/input";
 import { Icon } from "@workspace/ui/composed/icon";
 import type { Dispatch, SetStateAction } from "react";
-import { useRef } from "react";
+import { useRef, useState } from "react";
 import { useForm } from "react-hook-form";
 import { useTranslation } from "react-i18next";
 import { z } from "zod";
 import { useGlobalStore } from "@/stores/global";
 import type { TurnstileRef } from "../turnstile";
 import CloudFlareTurnstile from "../turnstile";
+import LocalCaptcha, { type LocalCaptchaRef } from "../local-captcha";
 
 export default function LoginForm({
   loading,
@@ -34,14 +35,23 @@ export default function LoginForm({
   const { t } = useTranslation("auth");
   const { common } = useGlobalStore();
   const { verify } = common;
+  const [captchaId, setCaptchaId] = useState("");
+
+  const isTurnstile = verify.captcha_type === "turnstile";
+  const isLocal = verify.captcha_type === "local";
+  const captchaEnabled = verify.enable_user_login_captcha;
 
   const formSchema = z.object({
     email: z.email(t("login.email", "Please enter a valid email address")),
     password: z.string(),
     cf_token:
-      verify.enable_login_verify && verify.turnstile_site_key
+      captchaEnabled && isTurnstile && verify.turnstile_site_key
         ? z.string()
         : z.string().optional(),
+    captcha_code:
+      captchaEnabled && isLocal
+        ? z.string().min(1, t("captcha.required", "Please enter captcha code"))
+        : z.string().optional(),
   });
   const form = useForm<z.infer<typeof formSchema>>({
     resolver: zodResolver(formSchema),
@@ -49,11 +59,17 @@ export default function LoginForm({
   });
 
   const turnstile = useRef<TurnstileRef>(null);
+  const localCaptcha = useRef<LocalCaptchaRef>(null);
   const handleSubmit = form.handleSubmit((data) => {
     try {
+      // Add captcha_id for local captcha
+      if (isLocal && captchaEnabled) {
+        (data as any).captcha_id = captchaId;
+      }
       onSubmit(data);
     } catch (_error) {
       turnstile.current?.reset();
+      localCaptcha.current?.reset();
     }
   });
 
@@ -68,7 +84,7 @@ export default function LoginForm({
               <FormItem>
                 <FormControl>
                   <Input
-                    placeholder="Enter your email..."
+                    placeholder={t("login.emailPlaceholder", "Enter your email...")}
                     type="email"
                     {...field}
                   />
@@ -84,7 +100,7 @@ export default function LoginForm({
               <FormItem>
                 <FormControl>
                   <Input
-                    placeholder="Enter your password..."
+                    placeholder={t("login.passwordPlaceholder", "Enter your password...")}
                     type="password"
                     {...field}
                   />
@@ -93,7 +109,7 @@ export default function LoginForm({
               </FormItem>
             )}
           />
-          {verify.enable_login_verify && (
+          {captchaEnabled && isTurnstile && (
             <FormField
               control={form.control}
               name="cf_token"
@@ -111,6 +127,24 @@ export default function LoginForm({
               )}
             />
           )}
+          {captchaEnabled && isLocal && (
+            <FormField
+              control={form.control}
+              name="captcha_code"
+              render={({ field }) => (
+                <FormItem>
+                  <FormControl>
+                    <LocalCaptcha
+                      {...field}
+                      ref={localCaptcha}
+                      onCaptchaIdChange={setCaptchaId}
+                    />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+          )}
           <Button disabled={loading} type="submit">
             {loading && <Icon className="animate-spin" icon="mdi:loading" />}
             {t("login.title", "Login")}
diff --git a/apps/user/src/sections/auth/email/register-form.tsx b/apps/user/src/sections/auth/email/register-form.tsx
index aea367e..017de75 100644
--- a/apps/user/src/sections/auth/email/register-form.tsx
+++ b/apps/user/src/sections/auth/email/register-form.tsx
@@ -11,7 +11,7 @@ import { Input } from "@workspace/ui/components/input";
 import { Icon } from "@workspace/ui/composed/icon";
 import { Markdown } from "@workspace/ui/composed/markdown";
 import type { Dispatch, SetStateAction } from "react";
-import { useRef } from "react";
+import { useRef, useState } from "react";
 import { useForm } from "react-hook-form";
 import { useTranslation } from "react-i18next";
 import { z } from "zod";
@@ -19,6 +19,7 @@ import { useGlobalStore } from "@/stores/global";
 import SendCode from "../send-code";
 import type { TurnstileRef } from "../turnstile";
 import CloudFlareTurnstile from "../turnstile";
+import LocalCaptcha, { type LocalCaptchaRef } from "../local-captcha";
 
 export default function RegisterForm({
   loading,
@@ -36,6 +37,11 @@ export default function RegisterForm({
   const { t } = useTranslation("auth");
   const { common } = useGlobalStore();
   const { verify, auth, invite } = common;
+  const [captchaId, setCaptchaId] = useState("");
+
+  const isTurnstile = verify.captcha_type === "turnstile";
+  const isLocal = verify.captcha_type === "local";
+  const captchaEnabled = verify.enable_user_register_captcha;
 
   const handleCheckUser = async (email: string) => {
     try {
@@ -67,9 +73,13 @@ export default function RegisterForm({
       code: auth.email.enable_verify ? z.string() : z.string().nullish(),
       invite: invite.forced_invite ? z.string().min(1) : z.string().nullish(),
       cf_token:
-        verify.enable_register_verify && verify.turnstile_site_key
+        captchaEnabled && isTurnstile && verify.turnstile_site_key
           ? z.string()
           : z.string().nullish(),
+      captcha_code:
+        captchaEnabled && isLocal
+          ? z.string().min(1, t("captcha.required", "Please enter captcha code"))
+          : z.string().nullish(),
     })
     .superRefine(({ password, repeat_password }, ctx) => {
       if (password !== repeat_password) {
@@ -90,11 +100,17 @@ export default function RegisterForm({
   });
 
   const turnstile = useRef<TurnstileRef>(null);
+  const localCaptcha = useRef<LocalCaptchaRef>(null);
   const handleSubmit = form.handleSubmit((data) => {
     try {
+      // Add captcha_id for local captcha
+      if (isLocal && captchaEnabled) {
+        (data as any).captcha_id = captchaId;
+      }
       onSubmit(data);
     } catch (_error) {
       turnstile.current?.reset();
+      localCaptcha.current?.reset();
     }
   });
 
@@ -114,7 +130,7 @@ export default function RegisterForm({
                 <FormItem>
                   <FormControl>
                     <Input
-                      placeholder="Enter your email..."
+                      placeholder={t("register.emailPlaceholder", "Enter your email...")}
                       type="email"
                       {...field}
                     />
@@ -130,7 +146,7 @@ export default function RegisterForm({
                 <FormItem>
                   <FormControl>
                     <Input
-                      placeholder="Enter your password..."
+                      placeholder={t("register.passwordPlaceholder", "Enter your password...")}
                       type="password"
                       {...field}
                     />
@@ -147,7 +163,7 @@ export default function RegisterForm({
                   <FormControl>
                     <Input
                       disabled={loading}
-                      placeholder="Enter password again..."
+                      placeholder={t("register.repeatPasswordPlaceholder", "Enter password again...")}
                       type="password"
                       {...field}
                     />
@@ -166,7 +182,7 @@ export default function RegisterForm({
                       <div className="flex items-center gap-2">
                         <Input
                           disabled={loading}
-                          placeholder="Enter code..."
+                          placeholder={t("register.codePlaceholder", "Enter code...")}
                           type="text"
                           {...field}
                           value={field.value as string}
@@ -205,7 +221,7 @@ export default function RegisterForm({
                 </FormItem>
               )}
             />
-            {verify.enable_register_verify && (
+            {captchaEnabled && isTurnstile && (
               <FormField
                 control={form.control}
                 name="cf_token"
@@ -223,6 +239,24 @@ export default function RegisterForm({
                 )}
               />
             )}
+            {captchaEnabled && isLocal && (
+              <FormField
+                control={form.control}
+                name="captcha_code"
+                render={({ field }) => (
+                  <FormItem>
+                    <FormControl>
+                      <LocalCaptcha
+                        {...field}
+                        ref={localCaptcha}
+                        onCaptchaIdChange={setCaptchaId}
+                      />
+                    </FormControl>
+                    <FormMessage />
+                  </FormItem>
+                )}
+              />
+            )}
             <Button disabled={loading} type="submit">
               {loading && <Icon className="animate-spin" icon="mdi:loading" />}
               {t("register.title", "Register")}
diff --git a/apps/user/src/sections/auth/email/reset-form.tsx b/apps/user/src/sections/auth/email/reset-form.tsx
index 1b43120..bc777b9 100644
--- a/apps/user/src/sections/auth/email/reset-form.tsx
+++ b/apps/user/src/sections/auth/email/reset-form.tsx
@@ -10,7 +10,7 @@ import {
 import { Input } from "@workspace/ui/components/input";
 import { Icon } from "@workspace/ui/composed/icon";
 import type { Dispatch, SetStateAction } from "react";
-import { useRef } from "react";
+import { useRef, useState } from "react";
 import { useForm } from "react-hook-form";
 import { useTranslation } from "react-i18next";
 import { z } from "zod";
@@ -18,6 +18,7 @@ import { useGlobalStore } from "@/stores/global";
 import SendCode from "../send-code";
 import type { TurnstileRef } from "../turnstile";
 import CloudFlareTurnstile from "../turnstile";
+import LocalCaptcha, { type LocalCaptchaRef } from "../local-captcha";
 
 export default function ResetForm({
   loading,
@@ -36,6 +37,11 @@ export default function ResetForm({
 
   const { common } = useGlobalStore();
   const { verify, auth } = common;
+  const [captchaId, setCaptchaId] = useState("");
+
+  const isTurnstile = verify.captcha_type === "turnstile";
+  const isLocal = verify.captcha_type === "local";
+  const captchaEnabled = verify.enable_user_reset_password_captcha;
 
   const formSchema = z.object({
     email: z
@@ -44,9 +50,13 @@ export default function ResetForm({
     password: z.string(),
     code: auth?.email?.enable_verify ? z.string() : z.string().nullish(),
     cf_token:
-      verify.enable_register_verify && verify.turnstile_site_key
+      captchaEnabled && isTurnstile && verify.turnstile_site_key
         ? z.string()
         : z.string().nullish(),
+    captcha_code:
+      captchaEnabled && isLocal
+        ? z.string().min(1, t("captcha.required", "Please enter captcha code"))
+        : z.string().nullish(),
   });
   const form = useForm<z.infer<typeof formSchema>>({
     resolver: zodResolver(formSchema),
@@ -54,11 +64,17 @@ export default function ResetForm({
   });
 
   const turnstile = useRef<TurnstileRef>(null);
+  const localCaptcha = useRef<LocalCaptchaRef>(null);
   const handleSubmit = form.handleSubmit((data) => {
     try {
+      // Add captcha_id for local captcha
+      if (isLocal && captchaEnabled) {
+        (data as any).captcha_id = captchaId;
+      }
       onSubmit(data);
     } catch (_error) {
       turnstile.current?.reset();
+      localCaptcha.current?.reset();
     }
   });
 
@@ -73,7 +89,7 @@ export default function ResetForm({
               <FormItem>
                 <FormControl>
                   <Input
-                    placeholder="Enter your email..."
+                    placeholder={t("reset.emailPlaceholder", "Enter your email...")}
                     type="email"
                     {...field}
                   />
@@ -91,7 +107,7 @@ export default function ResetForm({
                   <div className="flex items-center gap-2">
                     <Input
                       disabled={loading}
-                      placeholder="Enter code..."
+                      placeholder={t("reset.codePlaceholder", "Enter code...")}
                       type="text"
                       {...field}
                       value={field.value as string}
@@ -116,7 +132,7 @@ export default function ResetForm({
               <FormItem>
                 <FormControl>
                   <Input
-                    placeholder="Enter your new password..."
+                    placeholder={t("reset.passwordPlaceholder", "Enter your new password...")}
                     type="password"
                     {...field}
                   />
@@ -125,7 +141,7 @@ export default function ResetForm({
               </FormItem>
             )}
           />
-          {verify.enable_reset_password_verify && (
+          {captchaEnabled && isTurnstile && (
             <FormField
               control={form.control}
               name="cf_token"
@@ -143,6 +159,24 @@ export default function ResetForm({
               )}
             />
           )}
+          {captchaEnabled && isLocal && (
+            <FormField
+              control={form.control}
+              name="captcha_code"
+              render={({ field }) => (
+                <FormItem>
+                  <FormControl>
+                    <LocalCaptcha
+                      {...field}
+                      ref={localCaptcha}
+                      onCaptchaIdChange={setCaptchaId}
+                    />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+          )}
           <Button disabled={loading} type="submit">
             {loading && <Icon className="animate-spin" icon="mdi:loading" />}
             {t("reset.title", "Reset Password")}
diff --git a/apps/user/src/sections/auth/local-captcha.tsx b/apps/user/src/sections/auth/local-captcha.tsx
new file mode 100644
index 0000000..c922494
--- /dev/null
+++ b/apps/user/src/sections/auth/local-captcha.tsx
@@ -0,0 +1,95 @@
+import { Button } from "@workspace/ui/components/button";
+import { Input } from "@workspace/ui/components/input";
+import { Icon } from "@workspace/ui/composed/icon";
+import { generateCaptcha } from "@workspace/ui/services/common/auth";
+import { forwardRef, useEffect, useImperativeHandle, useState } from "react";
+import { useTranslation } from "react-i18next";
+
+export interface LocalCaptchaRef {
+  reset: () => void;
+}
+
+interface LocalCaptchaProps {
+  value?: string | null;
+  onChange?: (value: string) => void;
+  onCaptchaIdChange?: (id: string) => void;
+}
+
+const LocalCaptcha = forwardRef<LocalCaptchaRef, LocalCaptchaProps>(
+  ({ value, onChange, onCaptchaIdChange }, ref) => {
+    const { t } = useTranslation("auth");
+    const [captchaImage, setCaptchaImage] = useState("");
+    const [loading, setLoading] = useState(false);
+
+    const fetchCaptcha = async () => {
+      setLoading(true);
+      try {
+        const res = await generateCaptcha();
+        const captchaData = res.data?.data;
+        if (captchaData) {
+          setCaptchaImage(captchaData.image);
+          onCaptchaIdChange?.(captchaData.id);
+        }
+      } catch (error) {
+        console.error("Failed to generate captcha:", error);
+      } finally {
+        setLoading(false);
+      }
+    };
+
+    useEffect(() => {
+      fetchCaptcha();
+    }, []);
+
+    useImperativeHandle(ref, () => ({
+      reset: () => {
+        onChange?.("");
+        fetchCaptcha();
+      },
+    }));
+
+    return (
+      <div className="flex gap-2">
+        <Input
+          placeholder={t("captcha.placeholder", "Enter captcha code...")}
+          value={value || ""}
+          onChange={(e) => onChange?.(e.target.value)}
+          className="flex-1"
+        />
+        <div className="relative h-10 w-32 flex-shrink-0">
+          {loading ? (
+            <div className="flex h-full items-center justify-center bg-muted">
+              <Icon className="animate-spin" icon="mdi:loading" />
+            </div>
+          ) : captchaImage ? (
+            <img
+              src={captchaImage}
+              alt="captcha"
+              className="h-full w-full cursor-pointer object-contain"
+              onClick={fetchCaptcha}
+              title={t("captcha.clickToRefresh", "Click to refresh")}
+            />
+          ) : (
+            <div className="flex h-full items-center justify-center bg-muted text-xs text-muted-foreground">
+              {t("captcha.noImage", "No Image")}
+            </div>
+          )}
+        </div>
+        <Button
+          type="button"
+          variant="outline"
+          size="icon"
+          onClick={fetchCaptcha}
+          disabled={loading}
+          title={t("captcha.refresh", "Refresh captcha")}
+        >
+          <Icon icon="mdi:refresh" />
+        </Button>
+      </div>
+    );
+  }
+);
+
+LocalCaptcha.displayName = "LocalCaptcha";
+
+export default LocalCaptcha;
diff --git a/apps/user/src/sections/auth/phone/login-form.tsx b/apps/user/src/sections/auth/phone/login-form.tsx
index e60e0a7..622a779 100644
--- a/apps/user/src/sections/auth/phone/login-form.tsx
+++ b/apps/user/src/sections/auth/phone/login-form.tsx
@@ -19,6 +19,7 @@ import { useGlobalStore } from "@/stores/global";
 import SendCode from "../send-code";
 import type { TurnstileRef } from "../turnstile";
 import CloudFlareTurnstile from "../turnstile";
+import LocalCaptcha, { type LocalCaptchaRef } from "../local-captcha";
 
 export default function LoginForm({
   loading,
@@ -34,6 +35,11 @@ export default function LoginForm({
   const { t } = useTranslation("auth");
   const { common } = useGlobalStore();
   const { verify } = common;
+  const [captchaId, setCaptchaId] = useState("");
+
+  const isTurnstile = verify.captcha_type === "turnstile";
+  const isLocal = verify.captcha_type === "local";
+  const captchaEnabled = verify.enable_user_login_captcha;
 
   const formSchema = z.object({
     telephone_area_code: z.string(),
@@ -41,9 +47,13 @@ export default function LoginForm({
     telephone_code: z.string().optional(),
     password: z.string().optional(),
     cf_token:
-      verify.enable_login_verify && verify.turnstile_site_key
+      captchaEnabled && isTurnstile && verify.turnstile_site_key
         ? z.string()
         : z.string().optional(),
+    captcha_code:
+      captchaEnabled && isLocal
+        ? z.string().min(1, t("captcha.required", "Please enter captcha code"))
+        : z.string().optional(),
   });
   const form = useForm<z.infer<typeof formSchema>>({
     resolver: zodResolver(formSchema),
@@ -53,11 +63,17 @@ export default function LoginForm({
   const [mode, setMode] = useState<"password" | "code">("password");
 
   const turnstile = useRef<TurnstileRef>(null);
+  const localCaptcha = useRef<LocalCaptchaRef>(null);
   const handleSubmit = form.handleSubmit((data) => {
     try {
+      // Add captcha_id for local captcha
+      if (isLocal && captchaEnabled) {
+        (data as any).captcha_id = captchaId;
+      }
       onSubmit(data);
     } catch (_error) {
       turnstile.current?.reset();
+      localCaptcha.current?.reset();
     }
   });
 
@@ -88,7 +104,7 @@ export default function LoginForm({
                                   );
                                 }
                               }}
-                              placeholder="Area code..."
+                              placeholder={t("register.areaCodePlaceholder", "Area code...")}
                               simple
                               value={field.value}
                             />
@@ -99,7 +115,7 @@ export default function LoginForm({
                     />
                     <Input
                       className="rounded-l-none"
-                      placeholder="Enter your telephone..."
+                      placeholder={t("register.telephonePlaceholder", "Enter your telephone...")}
                       type="tel"
                       {...field}
                     />
@@ -119,7 +135,9 @@ export default function LoginForm({
                   <div className="flex gap-2">
                     <Input
                       placeholder={
-                        mode === "code" ? "Enter code..." : "Enter password..."
+                        mode === "code"
+                          ? t("register.codePlaceholder", "Enter code...")
+                          : t("login.passwordPlaceholder", "Enter your password...")
                       }
                       type={mode === "code" ? "text" : "password"}
                       {...field}
@@ -157,7 +175,7 @@ export default function LoginForm({
               </FormItem>
             )}
           />
-          {verify.enable_login_verify && (
+          {captchaEnabled && isTurnstile && (
             <FormField
               control={form.control}
               name="cf_token"
@@ -175,6 +193,24 @@ export default function LoginForm({
               )}
             />
           )}
+          {captchaEnabled && isLocal && (
+            <FormField
+              control={form.control}
+              name="captcha_code"
+              render={({ field }) => (
+                <FormItem>
+                  <FormControl>
+                    <LocalCaptcha
+                      {...field}
+                      ref={localCaptcha}
+                      onCaptchaIdChange={setCaptchaId}
+                    />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+          )}
           <Button disabled={loading} type="submit">
             {loading && <Icon className="animate-spin" icon="mdi:loading" />}
             {t("login.title", "Login")}
diff --git a/apps/user/src/sections/auth/phone/register-form.tsx b/apps/user/src/sections/auth/phone/register-form.tsx
index fbcbf0a..56777e6 100644
--- a/apps/user/src/sections/auth/phone/register-form.tsx
+++ b/apps/user/src/sections/auth/phone/register-form.tsx
@@ -12,7 +12,7 @@ import { AreaCodeSelect } from "@workspace/ui/composed/area-code-select";
 import { Icon } from "@workspace/ui/composed/icon";
 import { Markdown } from "@workspace/ui/composed/markdown";
 import type { Dispatch, SetStateAction } from "react";
-import { useRef } from "react";
+import { useRef, useState } from "react";
 import { useForm } from "react-hook-form";
 import { useTranslation } from "react-i18next";
 import { z } from "zod";
@@ -20,6 +20,7 @@ import { useGlobalStore } from "@/stores/global";
 import SendCode from "../send-code";
 import type { TurnstileRef } from "../turnstile";
 import CloudFlareTurnstile from "../turnstile";
+import LocalCaptcha, { type LocalCaptchaRef } from "../local-captcha";
 
 export default function RegisterForm({
   loading,
@@ -36,6 +37,11 @@ export default function RegisterForm({
   const { common } = useGlobalStore();
   const { verify, auth, invite } = common;
   const { enable_whitelist, whitelist } = auth.mobile;
+  const [captchaId, setCaptchaId] = useState("");
+
+  const isTurnstile = verify.captcha_type === "turnstile";
+  const isLocal = verify.captcha_type === "local";
+  const captchaEnabled = verify.enable_user_register_captcha;
 
   const formSchema = z
     .object({
@@ -46,9 +52,13 @@ export default function RegisterForm({
       code: z.string(),
       invite: invite.forced_invite ? z.string().min(1) : z.string().nullish(),
       cf_token:
-        verify.enable_register_verify && verify.turnstile_site_key
+        captchaEnabled && isTurnstile && verify.turnstile_site_key
           ? z.string()
           : z.string().nullish(),
+      captcha_code:
+        captchaEnabled && isLocal
+          ? z.string().min(1, t("captcha.required", "Please enter captcha code"))
+          : z.string().nullish(),
     })
     .superRefine(({ password, repeat_password }, ctx) => {
       if (password !== repeat_password) {
@@ -70,11 +80,17 @@ export default function RegisterForm({
   });
 
   const turnstile = useRef<TurnstileRef>(null);
+  const localCaptcha = useRef<LocalCaptchaRef>(null);
   const handleSubmit = form.handleSubmit((data) => {
     try {
+      // Add captcha_id for local captcha
+      if (isLocal && captchaEnabled) {
+        (data as any).captcha_id = captchaId;
+      }
       onSubmit(data);
     } catch (_error) {
       turnstile.current?.reset();
+      localCaptcha.current?.reset();
     }
   });
 
@@ -110,7 +126,7 @@ export default function RegisterForm({
                                     );
                                   }
                                 }}
-                                placeholder="Area code..."
+                                placeholder={t("register.areaCodePlaceholder", "Area code...")}
                                 simple
                                 value={field.value}
                                 whitelist={enable_whitelist ? whitelist : []}
@@ -122,7 +138,7 @@ export default function RegisterForm({
                       />
                       <Input
                         className="rounded-l-none"
-                        placeholder="Enter your telephone..."
+                        placeholder={t("register.telephonePlaceholder", "Enter your telephone...")}
                         type="tel"
                         {...field}
                       />
@@ -139,7 +155,7 @@ export default function RegisterForm({
                 <FormItem>
                   <FormControl>
                     <Input
-                      placeholder="Enter your password..."
+                      placeholder={t("register.passwordPlaceholder", "Enter your password...")}
                       type="password"
                       {...field}
                     />
@@ -156,7 +172,7 @@ export default function RegisterForm({
                   <FormControl>
                     <Input
                       disabled={loading}
-                      placeholder="Enter password again..."
+                      placeholder={t("register.repeatPasswordPlaceholder", "Enter password again...")}
                       type="password"
                       {...field}
                     />
@@ -174,7 +190,7 @@ export default function RegisterForm({
                     <div className="flex items-center gap-2">
                       <Input
                         disabled={loading}
-                        placeholder="Enter code..."
+                        placeholder={t("register.codePlaceholder", "Enter code...")}
                         type="text"
                         {...field}
                         value={field.value as string}
@@ -216,7 +232,7 @@ export default function RegisterForm({
                 </FormItem>
               )}
             />
-            {verify.enable_register_verify && (
+            {captchaEnabled && isTurnstile && (
               <FormField
                 control={form.control}
                 name="cf_token"
@@ -234,6 +250,24 @@ export default function RegisterForm({
                 )}
               />
             )}
+            {captchaEnabled && isLocal && (
+              <FormField
+                control={form.control}
+                name="captcha_code"
+                render={({ field }) => (
+                  <FormItem>
+                    <FormControl>
+                      <LocalCaptcha
+                        {...field}
+                        ref={localCaptcha}
+                        onCaptchaIdChange={setCaptchaId}
+                      />
+                    </FormControl>
+                    <FormMessage />
+                  </FormItem>
+                )}
+              />
+            )}
             <Button disabled={loading} type="submit">
               {loading && <Icon className="animate-spin" icon="mdi:loading" />}
               {t("register.title", "Register")}
diff --git a/apps/user/src/sections/auth/phone/reset-form.tsx b/apps/user/src/sections/auth/phone/reset-form.tsx
index 1e02e24..8fe4fbd 100644
--- a/apps/user/src/sections/auth/phone/reset-form.tsx
+++ b/apps/user/src/sections/auth/phone/reset-form.tsx
@@ -11,7 +11,7 @@ import { Input } from "@workspace/ui/components/input";
 import { AreaCodeSelect } from "@workspace/ui/composed/area-code-select";
 import { Icon } from "@workspace/ui/composed/icon";
 import type { Dispatch, SetStateAction } from "react";
-import { useRef } from "react";
+import { useRef, useState } from "react";
 import { useForm } from "react-hook-form";
 import { useTranslation } from "react-i18next";
 import { z } from "zod";
@@ -19,6 +19,7 @@ import { useGlobalStore } from "@/stores/global";
 import SendCode from "../send-code";
 import type { TurnstileRef } from "../turnstile";
 import CloudFlareTurnstile from "../turnstile";
+import LocalCaptcha, { type LocalCaptchaRef } from "../local-captcha";
 
 export default function ResetForm({
   loading,
@@ -36,6 +37,11 @@ export default function ResetForm({
 
   const { common } = useGlobalStore();
   const { verify, auth } = common;
+  const [captchaId, setCaptchaId] = useState("");
+
+  const isTurnstile = verify.captcha_type === "turnstile";
+  const isLocal = verify.captcha_type === "local";
+  const captchaEnabled = verify.enable_user_reset_password_captcha;
 
   const formSchema = z.object({
     telephone_area_code: z.string(),
@@ -43,9 +49,13 @@ export default function ResetForm({
     password: z.string(),
     code: auth?.email?.enable_verify ? z.string() : z.string().nullish(),
     cf_token:
-      verify.enable_register_verify && verify.turnstile_site_key
+      captchaEnabled && isTurnstile && verify.turnstile_site_key
         ? z.string()
         : z.string().nullish(),
+    captcha_code:
+      captchaEnabled && isLocal
+        ? z.string().min(1, t("captcha.required", "Please enter captcha code"))
+        : z.string().nullish(),
   });
   const form = useForm<z.infer<typeof formSchema>>({
     resolver: zodResolver(formSchema),
@@ -53,11 +63,17 @@ export default function ResetForm({
   });
 
   const turnstile = useRef<TurnstileRef>(null);
+  const localCaptcha = useRef<LocalCaptchaRef>(null);
   const handleSubmit = form.handleSubmit((data) => {
     try {
+      // Add captcha_id for local captcha
+      if (isLocal && captchaEnabled) {
+        (data as any).captcha_id = captchaId;
+      }
       onSubmit(data);
     } catch (_error) {
       turnstile.current?.reset();
+      localCaptcha.current?.reset();
     }
   });
 
@@ -88,7 +104,7 @@ export default function ResetForm({
                                   );
                                 }
                               }}
-                              placeholder="Area code..."
+                              placeholder={t("register.areaCodePlaceholder", "Area code...")}
                               simple
                               value={field.value}
                             />
@@ -99,7 +115,7 @@ export default function ResetForm({
                     />
                     <Input
                       className="rounded-l-none"
-                      placeholder="Enter your telephone..."
+                      placeholder={t("register.telephonePlaceholder", "Enter your telephone...")}
                       type="tel"
                       {...field}
                     />
@@ -117,7 +133,7 @@ export default function ResetForm({
                 <FormControl>
                   <div className="flex items-center gap-2">
                     <Input
-                      placeholder="Enter code..."
+                      placeholder={t("register.codePlaceholder", "Enter code...")}
                       type="text"
                       {...field}
                       value={field.value as string}
@@ -143,7 +159,7 @@ export default function ResetForm({
               <FormItem>
                 <FormControl>
                   <Input
-                    placeholder="Enter your new password..."
+                    placeholder={t("reset.passwordPlaceholder", "Enter your new password...")}
                     type="password"
                     {...field}
                   />
@@ -152,7 +168,7 @@ export default function ResetForm({
               </FormItem>
             )}
           />
-          {verify.enable_reset_password_verify && (
+          {captchaEnabled && isTurnstile && (
             <FormField
               control={form.control}
               name="cf_token"
@@ -170,6 +186,24 @@ export default function ResetForm({
               )}
             />
           )}
+          {captchaEnabled && isLocal && (
+            <FormField
+              control={form.control}
+              name="captcha_code"
+              render={({ field }) => (
+                <FormItem>
+                  <FormControl>
+                    <LocalCaptcha
+                      {...field}
+                      ref={localCaptcha}
+                      onCaptchaIdChange={setCaptchaId}
+                    />
+                  </FormControl>
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+          )}
           <Button disabled={loading} type="submit">
             {loading && <Icon className="animate-spin" icon="mdi:loading" />}
             {t("reset.title", "Reset Password")}
diff --git a/apps/user/src/stores/global.tsx b/apps/user/src/stores/global.tsx
index 07ce695..4b9ac0b 100644
--- a/apps/user/src/stores/global.tsx
+++ b/apps/user/src/stores/global.tsx
@@ -49,9 +49,14 @@ export const useGlobalStore = create<GlobalStore>((set, get) => ({
     },
     verify: {
       turnstile_site_key: "",
+      captcha_type: "turnstile",
       enable_login_verify: false,
       enable_register_verify: false,
       enable_reset_password_verify: false,
+      enable_user_login_captcha: false,
+      enable_user_register_captcha: false,
+      enable_user_reset_password_captcha: false,
+      enable_admin_login_captcha: false,
     },
     auth: {
       mobile: {
diff --git a/bun.lock b/bun.lock
index 8b15571..b88c820 100644
--- a/bun.lock
+++ b/bun.lock
@@ -1,6 +1,5 @@
 {
   "lockfileVersion": 1,
-  "configVersion": 0,
   "workspaces": {
     "": {
       "name": "shadcn-ui-monorepo",
@@ -30,7 +29,7 @@
       "name": "ppanel-admin-web",
       "dependencies": {
         "@faker-js/faker": "^10.0.0",
-        "@lottiefiles/dotlottie-react": "^0.17.7",
+        "@lottiefiles/dotlottie-react": "^0.17.15",
         "@noble/curves": "^2.0.1",
         "@stripe/react-stripe-js": "^5.4.0",
         "@stripe/stripe-js": "^8.5.2",
@@ -70,7 +69,7 @@
       "name": "ppanel-user-web",
       "dependencies": {
         "@faker-js/faker": "^10.0.0",
-        "@lottiefiles/dotlottie-react": "^0.17.7",
+        "@lottiefiles/dotlottie-react": "^0.17.15",
         "@stripe/react-stripe-js": "^5.4.0",
         "@stripe/stripe-js": "^8.5.2",
         "@tailwindcss/vite": "^4.0.6",
@@ -548,9 +547,9 @@
 
     "@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.29", "", { "dependencies": { "@jridgewell/resolve-uri": "3.1.2", "@jridgewell/sourcemap-codec": "1.5.4" } }, "sha512-uw6guiW/gcAGPDhLmd77/6lW8QLeiV5RUTsAX46Db6oLhGaVj4lhnPwb184s1bkc8kdVg/+h988dro8GRDpmYQ=="],
 
-    "@lottiefiles/dotlottie-react": ["@lottiefiles/dotlottie-react@0.17.7", "", { "dependencies": { "@lottiefiles/dotlottie-web": "0.56.0" }, "peerDependencies": { "react": "^17 || ^18 || ^19" } }, "sha512-A6wO3zqkDx/t0ULfctcr1Bmb1f1hc4zUV3NcbKQOsBGAOIx1vABV/fRabFYElvbJl9lmOR24yMh//Z0fvvJV+Q=="],
+    "@lottiefiles/dotlottie-react": ["@lottiefiles/dotlottie-react@0.17.15", "", { "dependencies": { "@lottiefiles/dotlottie-web": "0.63.0" }, "peerDependencies": { "react": "^17 || ^18 || ^19" } }, "sha512-4wYAjsJhM28eUvJ/gT3KRM6fcyT7EM9n7PDrP71LaBTacc6bSN43qFTSJc1Li3QxUiraz23p0Q8EJBzXo8DsRw=="],
 
-    "@lottiefiles/dotlottie-web": ["@lottiefiles/dotlottie-web@0.56.0", "", {}, "sha512-bWHRIGzjZs3Hjkz0JRsCMX2ya9a1tGU4atdrlfM3UoN0iamsDE64kSCMfGuchCwGAxg0xEh84CkF+SVV1NU9ow=="],
+    "@lottiefiles/dotlottie-web": ["@lottiefiles/dotlottie-web@0.63.0", "", {}, "sha512-oYIkvu6E4n8fZH7ciQsVqamlUDeBnd6JbNYa1UWC/npkNzEHqM5saL3vk/nNorqdfjYwdcdmhLtYbnuwVy+3/Q=="],
 
     "@monaco-editor/loader": ["@monaco-editor/loader@1.7.0", "", { "dependencies": { "state-local": "^1.0.6" } }, "sha512-gIwR1HrJrrx+vfyOhYmCZ0/JcWqG5kbfG7+d3f/C1LXk2EvzAbHSg3MQ5lO2sMlo9izoAZ04shohfKLVT6crVA=="],
 
diff --git a/packages/ui/src/services/admin/auth.ts b/packages/ui/src/services/admin/auth.ts
new file mode 100644
index 0000000..2545953
--- /dev/null
+++ b/packages/ui/src/services/admin/auth.ts
@@ -0,0 +1,17 @@
+// @ts-nocheck
+/* eslint-disable */
+import request from "@workspace/ui/lib/request";
+
+/** Generate captcha POST /v1/auth/admin/captcha/generate */
+export async function adminGenerateCaptcha(options?: { [key: string]: any }) {
+  return request<API.Response & { data?: API.GenerateCaptchaResponse }>(
+    `${import.meta.env.VITE_API_PREFIX || ""}/v1/auth/admin/captcha/generate`,
+    {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      ...(options || {}),
+    }
+  );
+}
diff --git a/packages/ui/src/services/admin/index.ts b/packages/ui/src/services/admin/index.ts
index feb9e69..17d9303 100644
--- a/packages/ui/src/services/admin/index.ts
+++ b/packages/ui/src/services/admin/index.ts
@@ -5,6 +5,7 @@
 import * as ads from "./ads";
 import * as announcement from "./announcement";
 import * as application from "./application";
+import * as auth from "./auth";
 import * as authMethod from "./authMethod";
 import * as console from "./console";
 import * as coupon from "./coupon";
@@ -24,6 +25,7 @@ export default {
   ads,
   announcement,
   application,
+  auth,
   authMethod,
   console,
   coupon,
diff --git a/packages/ui/src/services/common/auth.ts b/packages/ui/src/services/common/auth.ts
index f7b6828..6c08d87 100644
--- a/packages/ui/src/services/common/auth.ts
+++ b/packages/ui/src/services/common/auth.ts
@@ -163,3 +163,17 @@ export async function telephoneResetPassword(
     }
   );
 }
+
+/** Generate captcha POST /v1/auth/captcha/generate */
+export async function generateCaptcha(options?: { [key: string]: any }) {
+  return request<API.Response & { data?: API.GenerateCaptchaResponse }>(
+    `${import.meta.env.VITE_API_PREFIX || ""}/v1/auth/captcha/generate`,
+    {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      ...(options || {}),
+    }
+  );
+}
diff --git a/packages/ui/src/services/common/typings.d.ts b/packages/ui/src/services/common/typings.d.ts
index ad7e9a1..a9d76d3 100644
--- a/packages/ui/src/services/common/typings.d.ts
+++ b/packages/ui/src/services/common/typings.d.ts
@@ -1111,9 +1111,14 @@ declare namespace API {
 
   type VeifyConfig = {
     turnstile_site_key: string;
+    captcha_type: string;
     enable_login_verify: boolean;
     enable_register_verify: boolean;
     enable_reset_password_verify: boolean;
+    enable_user_login_captcha: boolean;
+    enable_user_register_captcha: boolean;
+    enable_user_reset_password_captcha: boolean;
+    enable_admin_login_captcha: boolean;
   };
 
   type VerifyCodeConfig = {