Spam Protection and Advanced Options
Select Form Builder, then open Advanced from the Content tab for honeypot, reCAPTCHA, CSRF, and HTML ID controls.
Honeypot
Enable Add Honeypot Field and save. Submissions filling this normally empty field can be rejected. It cannot block human spam or bots that leave the field empty.
reCAPTCHA
Enable reCAPTCHA > Enable reCAPTCHA, then configure Use reCAPTCHA API Key with matching Site Key and Secret Key for the current domain. Breakdance uses v3 assessment, not a checkbox challenge.
Default uses site credentials; Custom sets them for this form. Correct missing/invalid credentials and use Reload Key to recheck.
If legitimate submissions fail, check v3/domain compatibility, script blocking, and WordPress connectivity to the verification service.
For custom script loading, see Lazy-Load reCAPTCHA in the developer documentation.
CSRF Protection
Enable CSRF Protection protects against another site submitting requests in a visitor's session, particularly behind login. It does not replace spam protection. If an older page fails but refreshing works, check whether caching serves expired security tokens.
HTML IDs
- Form HTML ID — Form element ID.
- Submit HTML ID — Submit-button ID.
Keep IDs unique on the page. They differ from field Advanced > ID, used for variables and mapping.