There is no perfect way to combat spam, but the plugin offers a few functions that help.


A honeypot is a field that should be invisible to normal users. Simple spam bots might be tricked into filling it out. When the plugin detects that this field has been filled, it will pretend that the form has been sent successfully, but actually nothing happens.

If you experience problems with this, you can deactivate honeypots in “onOffice > Settings” in the “Forms” section.

Google reCAPTCHA

To combat more advanced spam bots, you can try using Google reCAPTCHA.

The included templates work with the version “v2 Invisible” and “v3” of Google reCAPTCHA. You need to create the corresponding API key pair as described in the Google reCAPTCHA documentation.

Enter the API key pair in “onOffice > Settings” in the “Google reCAPTCHA” section.

After saving, a button will show up in that section to test the key pair. Look in the bottom right of the page. If something went wrong, there will be a red error message. If everything works, you will see the Google reCAPTCHA logo.

You now need to configure each of your forms to use Google reCAPTCHA. So edit each form and in the box “Form Specific Options” activate the option “Requires Captcha”.

Now your forms should have more protection against spammers.