Personally, my experience is that every time I login using my web browser, I enter my username and password and press login. It then empties the password field and forces me to retype it as well as pass the captcha. Retyping the password and passing the captcha lets me in. It's the same every time, without fail.
No captcha is presented on the initial login request.
I could accept it asking me to pass the captcha, or retype my password if it was incorrect, but re-entering my password when it was correct is infuriating (first world problem for sure)
This has only started happening in the past 1-2 months