Formkove has two layers of spam protection: a built-in honeypot field (free) and Cloudflare Turnstile captcha (Pro).

Bots fill out every input they find. The honeypot field is hidden from real users but visible to bots — if it’s filled, it’s a spam submission and gets blocked automatically.

Add this to any form:

<input type="checkbox" name="botcheck" style="display:none">

That’s it. Formkove checks this field on every submission — no configuration, no keys, no cost.

Note: Some advanced bots can detect hidden fields. For stronger protection, add Cloudflare Turnstile (Pro).

Turnstile is Cloudflare’s privacy-first captcha. Unlike reCAPTCHA, it doesn’t track users across the web, and there’s no per-submission fee — you bring your own Cloudflare keys.

1. Get Cloudflare Turnstile keys

1. Sign in to Cloudflare Dashboard
2. Go to Turnstile → Add a widget
3. Choose “Managed” widget type
4. Copy your site key (public) and secret key (private)

2. Add the Turnstile script to your page

<script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>

3. Add the widget to your form

<form action="https://app.formkove.com/api/forms/YOUR_FORM_ID/submissions" method="POST">
    <!-- Your form fields here -->

    <div class="cf-turnstile" data-sitekey="YOUR_SITE_KEY" data-theme="light"></div>

    <button type="submit">Send</button>
</form>

4. Add your secret key to Formkove

1. Open app.formkove.com
2. Go to your form’s Settings → Spam Protection
3. Select Cloudflare Turnstile as the provider
4. Paste your Secret Key
5. Save

Formkove uses Turnstile because it’s better for your users and doesn’t add per-submission costs.