Anti-Spam & Honeypot Settings

Dealing with spam submissions is incredibly frustrating. Mimo Forms includes built-in protection mechanisms that silently block bots without subjecting your real users to frustrating visual CAPTCHA puzzles.

Step 1: Enable Spam Protection

Spam protection is easily activated on a per-form basis.

1. Open the form you wish to protect in the Form Builder.
2. Navigate to the Settings tab.
3. Locate the Security & Anti-Spam section.
4. Toggle the Enable Spam Protection switch to the "On" position.

Step 2: Implement the Honeypot (Backend Forms Only)

If you are using our Backend API to process a custom HTML form on your own website, you need to manually add the invisible honeypot field.

1. Open your website's HTML source code.
2. Inside your <form> tags, add the following snippet exactly as written:

   <input type="text" name="_gotcha" style="display:none" tabindex="-1" autocomplete="off">
   

3. Save your code and publish the changes to your live website.

[!NOTE]
How it works: Spambots automatically fill out every <input> field they encounter in a form. Because this field is hidden via CSS (style="display:none"), real human visitors will never see or interact with it. However, if a bot submits the form and the _gotcha field contains any text whatsoever, our servers will silently reject the submission!

Step 3: Advanced CAPTCHA (Optional Phase 2)

For exceptionally persistent spam attacks, you can add a strict visual CAPTCHA to your form.

1. In the Form Builder's left sidebar, locate the CAPTCHA field under Advanced Fields.
2. Drag and drop it onto your canvas.
3. Users will now be required to check a "I am human" box before they can click the submit button.

[!WARNING]
We recommend only utilizing visual CAPTCHAs if the invisible honeypot method is failing. Visual CAPTCHAs introduce friction and can lower your overall form conversion rates.