Spam Protection
New forms start protected. You can adjust each check, and add human verification when a form needs it. Open a form, then Settings.
Checks That Are Already On
| Check | What it does | New form default |
|---|---|---|
| Hidden field | Bots often fill a field people can’t see. A filled field rejects the submission | On |
| Minimum submit time | Rejects a form sent faster than a person could fill it | 1 second |
| Maximum links | Rejects a submission with too many links | 3 links |
Set a time or link limit to 0 to turn that check off. These checks run on the
server, before anything is stored or delivered. A rejected submission returns SPAM_REJECTED, and no email goes out.
Public routes also have a rate limit, so a burst of requests returns RATE_LIMITED. Formerie sets this limit. It isn’t a per-form setting in the app.
Human Verification
Human verification is optional, and off on new forms. Turn it on form by form under Human verification.
| Option | Good for |
|---|---|
| Formerie-managed Cloudflare Turnstile | Forms on supported Formerie-hosted domains, with no keys to set up |
| Your own Turnstile keys | Custom domains, or your own challenge settings |
| Your own reCAPTCHA v2 keys | A visible Google challenge |
| Your own reCAPTCHA v3 keys | A score, with your own minimum and expected action |
With your own keys, add every hosted or embedded domain to the widget’s settings in the provider’s console. Your secret key is encrypted before storage, and the app never shows it again.
Hosted pages, script embeds, and the browser mount render the challenge for you.
Custom UIs pass the provider’s token as verificationToken:
await forms.submit("example.com", "contact", {
fields,
verificationToken: captchaToken,
});Formerie verifies the token on the server before it accepts the submission.
Allowed Origins
Add your site’s origins under Allowed origins when you use an API or SDK integration. Browser requests from other origins are refused.
Not Available Yet
- Per-form rate limits, submission caps, and a duplicate window in the app.
- AI spam filtering, which is listed on the AI page as coming soon.