Spam Protection

Protect your forms from bots and spam submissions with multiple layers of defense.

Protection Methods

Google reCAPTCHA v3

Recommended

Invisible bot detection that runs in the background. No user interaction required - it analyzes behavior to detect bots without showing challenges.

InvisibleNo frictionHigh accuracyFree tier available

Honeypot Fields

Hidden fields that are invisible to real users but bots will fill in. Any submission with data in these fields is automatically rejected.

Zero frictionSimple setupNo external service

Rate Limiting

Limit the number of submissions from a single IP address. Prevents spam floods while allowing legitimate users through.

Per-IP limitsCustomizableAuto-blocking

Enabling Spam Protection

1
Open form settings
Go to your form and navigate to Settings
2
Go to Security
Click on the Security tab
3
Enable protections
Toggle on reCAPTCHA or add honeypot fields

Best Practices

Use multiple protection methods together for best results

Enable reCAPTCHA for high-traffic forms

Add honeypot fields for simple, frictionless protection

Don't set rate limits too low - you may block real users

Test your form after enabling protection to ensure it works

How It Works

When spam protection is enabled, submissions that appear to be spam are automatically blocked before they reach your submissions list. Honeypot fields silently reject bot submissions, while reCAPTCHA analyzes user behavior to block automated traffic.

Next Steps

Account Settings

More security options

Analytics

Monitor spam rates

Did this answer your question?