Cybersecurity

Honeypot field

A hidden form field that people never see but spam bots often fill in.

By Nick Irmo · Updated

What Honeypot field means

If the field contains anything, the submission is treated as spam. Honeypots are invisible to real visitors, so they block a lot of basic spam without hurting conversions.

Why it matters for your website

Spam form submissions waste time, bury real leads and can fill your CRM with junk. A honeypot blocks many bots without making real visitors solve puzzles. That keeps forms easy to use, which helps more real people finish them.

Example

A roofing contractor adds a hidden honeypot field to its quote form. Bots that fill it in get quietly rejected, and the daily flood of junk submissions drops.

Tips

  • Hide the field with CSS rather than making it a hidden input type.
  • Give it a believable name so bots are tempted to fill it.
  • Combine it with other checks if spam continues.

Common mistakes

  • Leaving the field visible or announced to screen readers, confusing real people.
  • Relying on a honeypot alone against advanced bots.

Questions about Honeypot field

What is Honeypot field?
A hidden form field that people never see but spam bots often fill in.
Is a honeypot better than a CAPTCHA?
It is less annoying for visitors, but it catches fewer advanced bots. Many sites use a honeypot first and add other protection only if needed.
Do honeypot fields affect accessibility?
They can if not done right. Hide the field from screen readers and keyboard users so real people never land on it.

Tell us what the site needs to do.

Share a few details and a budget range. We reply within one business day with a plan, a platform recommendation and a fixed quote.