Comment by theappsecguy

Yes you still need recaptcha simply to avoid password stuffing attacks.