Honeypot

Honeypot is a simple technique to catch automated bots that submit your form. A honeypot is a hidden field that bots will fill out but not humans.

Below is an example of a form with a honeypot field. The field is hidden by using the display: none style. Real users will not be able to see or interact with this field. For brevity, this example uses an inline style, however, it's recommended to include this in a CSS file. You should also avoid naming the input with a name that makes it obvious a honeypot field.

<form action="https://postform.com/s/FORM_ID" method="POST">
  <div>
    <label for="name">Name</label>
    <input type="text" id="name" name="name" />
  </div>
  <div>
    <label for="email">Email</label>
    <input type="email" id="email" name="email" />
  </div>

  <!-- Honeypot field -->
  <div style="display: none">
    <label for="website">Website</label>
    <input type="text" id="website" name="website" />
  </div>

  <button type="submit">Submit</button>
</form>

Plugin configuration

Postform just needs to know the name of your honeypot input. When your form is submitted, if this field has a value, it will be marked as spam.

Configure Plugin

Using the HTML form above as an example, the plugin would be configured to use website as the input name.

Was this page helpful?