Honeypot uses both the honeypot and timestamp methods of deterring spam bots from completing forms on your Drupal site (read more here). These methods are effective against many spam bots, and are not as intrusive as CAPTCHAs or other methods which punish the user [YouTube].
The module currently supports enabling for all forms on the site, or particular forms like user registration or password reset forms, webforms, contact forms, node forms, and comment forms.
All settings for this module are on the Honeypot configuration page, under the Configuration section, in the Content authoring settings. You can visit the configuration page directly at
admin/config/content/honeypot (Drupal 7/8) or
admin/settings/honeypot (Drupal 6). Read more about what all the settings mean in the Honeypot documentation.
Use in Your Own Forms and Customizations
If you want to add honeypot to your own forms, or to any form through your own module's hook_form_alter's, you can simply place the following function call inside your form builder function (or inside a hook_form_alter):
honeypot_add_form_protection($form, $form_state, array('honeypot', 'time_restriction'));
Note that you can enable or disable either the honeypot field, or the time restriction on the form by including or not including the option in the array.
You can also use Honeypot's API to modify the time delay for forms, add or remove protections for certain forms, etc.
Many people have reported dramatic reductions in spam when using this module; some of their stories can be found here: Honeypot success stories.
- Preventing Form Spam - article about different spam prevention techniques.
- Introducing the Honeypot form spam protection module for Drupal
- Honeypot Entityform - Adds entityform integration
There are many spam-protection modules on drupal.org, some of which have more or less robust methods of dealing with form spam. Some of the most used and recommended include:
- Mollom - Offers spam protection through their freemium service.
- CAPTCHA - A simple image-based CAPTCHA builder.
- reCAPTCHA - Implements reCAPTCHA for image-based CAPTCHAs.
- BOTCHA - Has many different bot-defeating recipes.
- Hidden CAPTCHA - Similar to this module in it's effectiveness.
#D8CX: I pledge that Honeypot will have a full Drupal 8 release on the day that Drupal 8 is released. Fulfilled!
- Maintenance status: Actively maintained
- Development status: Under active development
- Module categories: Content, Spam Prevention
- Reported installs: 78,757 sites currently report using this module. View usage statistics.
- Downloads: 294,992
- Automated tests: Enabled
- Last modified: February 16, 2016
- Stable releases receive coverage from the Drupal Security Team.
Look for the shield icon below.