1
Add a hidden field
2
Handle flagged submissions
If the honeypot field has a value, treat the submission as spam in your workflow or remove it from the dashboard.
For stronger protection, combine honeypots with CAPTCHA or rate limiting at the edge.
Security
Honeypot Fields
Add a hidden field to catch basic bots.
A honeypot field is a hidden input that legitimate users never fill, but basic bots often do. You can use this technique with Formbase by adding a hidden field and checking it in your UI or processing pipeline.
Formbase does not block honeypots automatically, so you should decide how to handle flagged submissions.
Real users never see or fill the hidden field.