Honeypot

Invisible to real users

Honeypot uses a hidden form field to detect and block bots without interfering with real users.

Zero user interaction required

Unlike CAPTCHAs, users don’t need to solve puzzles or click checkboxes, making it completely frictionless.

Higher form submission rates

No extra steps for real users, leading to higher form submission rates.

Reduces spam submissions

Effectively block bots from submitting fake entries, keeping databases and inboxes cleaner.

Lightweight & easy to implement

No external dependencies or APIs needed, making it a simple and fast solution for Craft CMS sites.

Configurable time-based validation

Honeypot rejects form submissions that are completed suspiciously fast, adding an extra layer of protection.

How Honeypot works

Adds a hidden field to forms

When a form is rendered, Honeypot automatically inserts a hidden input field that bots will fill out because bots indiscriminately enter data into all fields, (hidden or not), while real users don’t.

Detects bot activity

When the form is submitted, the plugin checks if the hidden field contains any data. If the field is filled out, the submission is rejected as spam.

Optional time-based validation

The plugin can also track how quickly the form is submitted. If the submission happens too fast (e.g., within a second or two), it is likely automated, and the submission can be rejected.

Prevents spam without user friction

Unlike CAPTCHAs, Honeypot does not require the user to solve puzzles, check boxes, or pick out images. This makes for a completely frictionless user experience while still providing effective spam protection.