3 ways to protect your Kadence Form Block from spam

OOPSpam Anti-Spam WordPress Plugin supports Kadence Form Block


Kadence is a well-known company in the WordPress community that has a couple of different products, including Kadence Theme and Kadence Blocks for building with Gutenberg. Their blocks work well and the theme is optimized for speed.

Both products are free to use but a Pro version is available for additional functionality. Kadence Blocks comes with Form Block for building contact forms, newsletter forms, login pages, and more.

In this post, I will focus on Kadence Form’s spam protection capabilities. The good news is that Form Block already comes with built-in support for honeypot and reCAPTCHA for free. Cloudflare’s Turnstile is available as part of Kadence CAPTCHA Plugin which is a premium plugin you need to purchase separately as part of their Full Bundle plan.

Kadence spam protection options

OOPSpam WordPress plugin

OOPSpam WordPress plugin (that’s us 👋) is another way to stop spam on your Kadence Form Block and WordPress comments. The plugin works with OOPSpam API that protects over 3.5M websites daily. While the other two alternatives are free, OOPSPam API is a paid service. But it does come with free 40/month spam checks for you to test and see the difference.

It’s likely you have already tried the below options, and they didn’t work for you. It could be a slow website from reCAPTCHA or overwhelming spam you are still getting despite implementing the below alternatives. These are benefits OOPSpam has over other alternative:

  1. Doesn’t slow down your website
  2. Keeps your site accessible to all users
  3. Stops both human spammers and bots

On the plugin’s settings page, you could also adjust how sensitive you want your spam filter to be. Even keeping default Sensitivity level setting will help you cut down spam to zero.

OOPSpam WordPress Plugin Sensitivity level

In addition, the plugin allows you to set up a filter to accept submissions only from certain countries and languages.

OOPSpam WordPress Plugin country & language restrictions

✨ Since then, we have also added the Block messages from these countries feature.

OOPSpam WordPress Plugin block countries

Here are a few steps to activate spam protection for Kadence Form:

  1. Subscribe to get an API key then copy-paste the API key to the plugin’s appropriate field under Settings->OOPSpam Anti-Spam on your WordPress Admin Dashboard.

    ℹ️ Make sure to select OOPSpam Dashboard on the setting page

  2. If you have Kadence Blocks installed then a special section will appear on the OOPSpam Anti-Spam plugin’s settings page.

    OOPSpam Anti-Spam WordPress Plugin Settings

  3. On this page, you need to activate the spam filter for Kadence Form Block by checking the Activate Spam Protection checkbox. You don’t have to do anything on your form. Once you activate spam protection on the OOPSpam plugin settings, you are good to go.

  4. Don’t forget to enter a short message to display when a spam form entry is submitted. Your message will appear at the bottom of the message field.

OOPSpam detected spam on Kadence Form Block


Honeypot

We wrote extensively about the honeypot technique and how it works. While it’s not as effective as it used to be, it still prevents some bots from spamming your forms. Kandence Form Block has a built-it honeypot field and it is enabled by default. The honeypot field won’t be visible to humans, but bots see the hidden field as a valid field. Bots scan a website and fill in all the fields, including the hidden field in your form. Kadence Form Block will dismiss every submission that has an entry in a hidden field.

reCAPTCHA

Kadence Form Block also comes with a captcha solution, namely Google’s reCAPTCHA. Setting up the form with reCAPTCHA is pretty straightforward. Generate reCAPTCHA keys through Google Admin Console and enter them in your form settings. Here is how to get reCAPTCHA keys:

  1. Go to the reCAPTCHA website and click on the “v3 Admin Console” button located on the top right corner of the page.
  2. Sign in to your Google account if you haven’t already done so.
  3. On the Admin Console page, click on the “Add” button to register a new site.
  4. Fill in the required fields, such as your website domain name and reCAPTCHA type (v2 or v3).
  5. After you’ve filled in the required fields, click on the “Submit” button to register your site. reCaptcha adding website
  6. You’ll be taken to a page with your site key and secret key. These are the keys you’ll need to integrate reCAPTCHA into your website. reCaptcha generates Site keys

Should I set up v2 or v3?

v3 came after many people complained about accessibility and usability issues with v2. v2 asks visitors to solve a challenge before submitting a form. To address this issue, Google removed the “challenge” part of reCAPTCHA. As a result, with v3, users don’t solve any challenge. Instead, it tracks the user’s behavior on your website and scores the user from 0 (bot) to 1 (human). It is up to the website owner to determine the threshold. In Kadence Forms, you don’t have control over this threshold.

Many people are happy with reCAPTCHA. It is effective against simple bots, however, advanced bots can bypass reCAPTCHA. There are also “captcha farms” where people get paid to solve reCAPTCHA. It may also slow down your website as it loads extra js files into your website.

If you’re looking for a free and easy solution, reCAPTCHA may be the answer.

📌 Tip: Consider adding both reCAPTCHA and the honeypot field to your contact form. Remember HoneyPot is enabled by default under Basic Spam Check setting. You don’t have to do anything.

After generating your Site Keys, edit your form and go to the Google reCAPTCHA setting. This setting is available directly on the page where you inserted your form.

Kadence reCAPTCHA setting

Insert the Site and Secret key you obtained from Admin Console into these fields and click Save. That is all.

Final thoughts

All websites eventually get hit by spammers. As a website grows and gets more traffic it attracts more serious spammers with advance bots. Both honeypot and reCAPTCHA will protect your website to a certain degree but they are not enough for targeted spam attacks, manual spam and sophisticated bots. I hope this article helps you find a solution for your spam problem.

That is all! Go on and create your forms.

Happy spam-free day!

Spam Protection for WordPress, Zapier, Make and more.

Since our launch in 2017 we’ve been perfecting our API to be the trusted option for small businesses to enterprise— and continue to stick to our values of being the accessibility and privacy-friendly option. Give us a shot!

Try OOPSpam for free → Try our WordPress plugin for free →

✓ No credit card required ✓ Cancel anytime

Enjoy Reading This Article?

Here are some more articles you might like to read next: