Unfortunately, there is no perfect solution to fight spam. However, the plugin offers helpful features.


A honeypot is a field in the form that is invisible to the normal user. However, simple spam bots fall for it and fill it in. When the plugin detects that the field has been filled in, it pretends that the form has been submitted successfully, but in reality nothing happens.

If you experience problems with this feature, you can turn off the Honeypot in onOffice > Settings in the “Forms” section.

Google reCAPTCHA

To fight advanced spam bots, you can use Google reCAPTCHA.

The provided template works with the “v2 invisible” and “v3” versions of Google reCAPTCHA. You need to create the appropriate API key pair as described in the Google reCAPTCHA documentation.

Enter the API key pair in onOffice > Settings in the “Google reCAPTCHA” section.

After saving, a button will appear in the section that allows you to test the key pair. Look in the bottom right corner of the page. If something went wrong, there will be a red error message there. If everything works, you will see the Google reCAPTCHA logo there.

You now need to set all forms to use Google reCAPTCHA.
Navigate to onOffice > Forms and edit the desired form. In the “Form specific options” box, tick the “Requires Captcha” checkbox.

  • It can be added for all forms in the “Special fields” GDPR (checkbox), where you can set the default value, a custom label and the mandatory field.
  • In onOffice enterprise, the Double Opt In option should also be enabled.

Related links

Currently, the success and error messages are directly in the form and need to be adjusted here. An extra PHP file can be created in which these are designed separately. This must then be “required” in the form file.

  • We always integrate Google Fonts locally. However, Google Maps, YouTube, Google reCAPTCHA or even externally purchased plugins and/or WordPress themes also load Google Fonts.
    • For plugins / themes this can often either be turned off in the settings in the WordPress backend or taken out by script dequeue.
  • For Google Maps/YouTube or Google reCAPTCHA, the initial blocking by a consent tool is inevitable and the content can only be loaded after consent.
  • To create a newsletter subscription form, you need a contact form. Here you can check the box for “Newsletter” in the Form Specific Options. Include the shortcode at the relevant place where you want the form to appear.
  • In onOffice enterprise, the double opt-in option should also be activated.

Related links