by
Team beta version
1 (0 reviews)
Samurai Honeypot for Forms
Invisible 15-layer anti-spam for Contact Form 7 & WPForms. Score-based detection silently blocks bots — no CAPTCHA, no user friction.
Samurai Honeypot for Forms ranks #40,444 among WordPress.org plugins with 1+ active installations, is #2,497 of 4,041 in the Security category, a 1/5 rating from 0 reviews, and was last updated Feb 26, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Tested up to WP 6.9 (Current: 7.0.2)
v1.0.0
Current Version v1.0.0
Updated 5 months ago
Last Update on 26 Feb, 2026
Refreshed 13 hours ago
Last Refreshed on
#2,497 of 4,041 in Security
Downloads -80.4% this week
Rank
#40,444
—
No change
Active Installs
1+
-66.7%
KW Avg Position
102
0.5 worse
Downloads
12
+3 today
Support Resolved
0%
—
No change
Rating
20%
Review 1 out of 5
1
(0 reviews)
Next Milestone 10
0+
10+
30,623
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 5 more installs to reach 10+
Rank Changes
Current
#40,444
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
1.0
0 reviews
Overall
20%
5
0
(0%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Tracked Keywords
Showing 2 of 2Unlock Keyword Analytics
Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.
- Full keyword position tracking
- Historical ranking data
- Competitor keyword analysis
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.0.0
- Last Updated
- Feb 26, 2026
- Requires WP
- 5.9+
- Tested Up To
- 6.9
- PHP Version
- 7.4 or higher
- Author
- Team beta version
Support & Rating
- Rating
- ★ ☆ ☆ ☆ ☆ 1
- Reviews
- 0
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
7K+ installs
#2,723
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#992
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#7
Wordfence Security - Firewall, Malware Scan, and Login Security
5M+ installs
#11
Really Simple Security - Simple and Performant Security (formerly Really Simple SSL)
3M+ installs
#17
Hostinger Tools
3M+ installs
#20
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
WP Super Cache
1M+ installs
#38
Frequently Asked Questions
Common questions about Samurai Honeypot for Forms
Yes. Tokens are fetched dynamically via REST API, so it works correctly with any page cache plugin.
The default difficulty is 4 (the first 4 hex characters of the SHA-256 hash must be zero). On typical devices this completes in tens to hundreds of milliseconds with no perceptible delay. You can adjust the difficulty from 2 to 6 in the settings.
Yes, for both Contact Form 7 and WPForms: Contact Form 7: Open the form editor, go to the "Additional Settings" tab, and add skip_samhp: on (or skip_samurai_honeypot: on). WPForms: Go to Settings > Samurai Honeypot > Access Control, and enter the form IDs in the "WPForms Skip Form IDs" textarea (one ID per line). You can find the form ID in WPForms > All Forms (the number in the Shortcode column).
By default, blocked submissions are silently discarded and not saved anywhere. If you use the Flamingo plugin, enable "Spam Logging" in the Samurai Honeypot settings page to save blocked messages to Flamingo's Spam folder. Warning: Enabling this under heavy spam attack may bloat your database. Use it temporarily for diagnosis.
Yes. Samurai Honeypot uses the wpcf7_skip_mail filter, so it works alongside reCAPTCHA, Akismet, and other anti-spam solutions.
By default, the plugin uses REMOTE_ADDR only. If you are behind Cloudflare or an Nginx reverse proxy, enable "Trusted Proxy Mode" in the plugin settings. The plugin validates proxy IPs against Cloudflare's published IP ranges and RFC 1918 private networks before trusting forwarded headers.
Go to the Samurai Honeypot settings page under Access Control. Enter one IP address or CIDR range per line (e.g. 192.168.1.0/24). Whitelisted IPs skip all spam scoring entirely. Blacklisted IPs receive an automatic +100 spam score. You can also enable "Whitelist Logged-in Users" to skip scoring for all authenticated WordPress users.
Content Rules analyze the text submitted through form fields for common spam patterns: URL Limit — Set a maximum number of URLs allowed per submission. Messages exceeding the limit receive +50 score. Set to 0 to disable. BBCode Detection — Detects [url=...] BBCode syntax, which is never used in legitimate contact form messages. Enabled by default (+100 score). WordPress Disallowed Keys — Reuses the keyword list from Settings > Discussion > Disallowed Comment Keys. Disabled by default; enable it to apply the same keyword blocking to form submissions (+100 score).
Yes. On the Samurai Honeypot settings page you can adjust the spam threshold (10-100, default 50), submission speed threshold, PoW difficulty, and rate limit.
Go to the Samurai Honeypot settings page and uncheck "Block Headless Browsers (Recommended)". This disables the server-side User-Agent check that instantly blocks known headless browsers (+100 score). Remember to re-enable it after testing is complete.
