Form utilities
Free Form Spam Protection Checker
Paste your form HTML to see whether it has a honeypot, a real HTTPS endpoint and other basic spam defences. Get fixes you can apply in minutes.
How to use this tool
- Paste the HTML of the form that is getting spam.
- Run the check to see which defences are present and which are missing.
- Add a honeypot or tighten field types, then connect a backend that filters submissions.
Related free tools
Honeypot field generator
Generate a hidden honeypot field that catches spam bots without a CAPTCHA. Copy the HTML into your form and reject submissions that fill it in.
Open tool ↗Form utilitiesForm action checker
Paste your form HTML to check the action URL, method and encoding. Catch GET submissions, missing HTTPS and file uploads without multipart encoding.
Open tool ↗Form generatorsContact form generator
Create a contact form with name, email and message fields, choose a style and export HTML or React. Connect it to Form Koi to get messages by email.
Open tool ↗Frequently asked questions
Form spam protection checker
questions.
Why does my form get spam even with required fields?
Bots post directly to the form action and ignore browser validation. Server-side filtering and a honeypot check stop them; required attributes alone do not.
Do I need a CAPTCHA?
Usually not for a contact form. A honeypot plus backend filtering catches most spam without making visitors solve puzzles.
Is anything I enter saved or sent to Form Koi?
No. Everything you type or upload stays in this browser tab and is processed locally. Copy or download anything you want to keep before leaving the page.
Start with Form Koi Free