1. A computer-implemented method comprising: receiving a request for protected content from a client, the protected content comprising data; determining a challenge phrase comprising a plurality of characters; dividing, using a computer processor, the challenge phrase into at least two character subsets selected from the plurality of characters comprising the challenge phrase, each of the at least two character subsets comprising less than all of the characters comprising the challenge phrase, wherein a first character subset and a second character subset of the at least two character subsets comprise one or more common characters, and the first character subset includes at least one character not included in the second character subset; obscuring a first part of a common character in the first character subset; obscuring a second part of the common character in the second character subset, the second part of the common character being different than the first part of the common character; sending the at least two character subsets to the client in response to the request; and receiving, from the client and in response to the at least two character subsets, an answer to the challenge phrase, wherein access to the protected content is limited based on whether the answer correctly solves the challenge phrase.