Contents
The platform includes automatic protection against bots and malicious submissions. You can reinforce this protection by enabling reCaptcha on your forms.
Automatic protection
All forms include automatic filters that detect and discard submissions matching common spam patterns, without requiring additional configuration.
reCaptcha
For stronger protection, you can enable reCaptcha on your forms. This adds a verification layer that helps distinguish real users from automated bots.
Enable reCaptcha
- Go to the dashboard.
- Select the form you want to protect.
- Open the Spam section.
- Enable reCaptcha and enter your Google reCaptcha site key.
- Save your changes.
If you do not have reCaptcha keys yet, you can get them for free at google.com/recaptcha.
Add reCaptcha to your form
<script src="https://www.google.com/recaptcha/api.js" async defer></script>
<form action="https://simpleapiform.com/f/{form_id}" method="POST">
<input type="text" name="name" placeholder="Your name">
<input type="email" name="email" placeholder="Your email">
<div class="g-recaptcha" data-sitekey="YOUR_SITE_KEY"></div>
<button type="submit">Send</button>
</form>The service automatically verifies the reCaptcha token on every submission. Submissions that fail verification are discarded without notification.
Honeypot field
A simple alternative to reCaptcha is a honeypot field. It is a hidden field that real users do not fill out, but bots often do. When the platform detects content in that field, it discards the submission.
To enable it, add a hidden field named _honeypot to your form:
<form action="https://simpleapiform.com/f/{form_id}" method="POST">
<input type="text" name="name" placeholder="Your name">
<input type="email" name="email" placeholder="Your email">
<input type="text" name="_honeypot" style="display:none">
<button type="submit">Send</button>
</form>