Security

Akismet Anti-Spam Alternatives: Modern Replacements

The default WordPress spam protection. Learn about modern spam prevention techniques.

The Problem with Akismet Anti-Spam

Akismet requires an API key and WordPress. Modern forms have better spam protection built-in.

Modern Alternatives

Honeypot Fields

Add hidden fields that bots fill out but humans don't see.

code

Pros

  • No external service
  • Free
  • Invisible to users

Cons

  • Not 100% effective

How to Implement

Add a hidden input field and reject submissions where it's filled.

Turnstile (Cloudflare)

Privacy-friendly CAPTCHA alternative from Cloudflare.

service

Pros

  • Privacy-first
  • Free
  • Less annoying than reCAPTCHA

Cons

  • External service

How to Implement

Add Turnstile widget to your forms and verify tokens server-side.

Form Service Protection

Formspree, Tally, and others include spam protection.

service

Pros

  • Built-in
  • No extra setup
  • Effective

Cons

  • Requires form service

How to Implement

Use a form service that includes spam protection.

Migration Steps

1

Implement honeypot fields in all forms

2

Add client-side validation

3

Consider Turnstile for high-value forms

4

Use form service with built-in protection

5

Monitor and adjust as needed

Code Example

// Honeypot implementation
export function ContactForm() {
  const [honeypot, setHoneypot] = useState('');
  
  const onSubmit = async (data) => {
    // Reject if honeypot is filled
    if (honeypot) {
      console.log('Bot detected');
      return;
    }
    // Process legitimate submission
    await submitForm(data);
  };
  
  return (
    <form onSubmit={handleSubmit(onSubmit)}>
      {/* Hidden honeypot field */}
      <input
        type="text"
        name="website"
        value={honeypot}
        onChange={(e) => setHoneypot(e.target.value)}
        style={{ display: 'none' }}
        tabIndex={-1}
        autoComplete="off"
      />
      {/* Real form fields */}
      <input {...register('email')} />
      <button type="submit">Submit</button>
    </form>
  );
}

Frequently Asked Questions

Is honeypot enough for spam protection?
For most sites, yes. Honeypot fields (hidden inputs that bots fill but humans don't) catch ~80% of spam with zero user friction. For high-traffic sites add Cloudflare Turnstile or reCAPTCHA v3 for the remaining percentile.
What about comment spam? Akismet handled both forms and comments.
Static sites usually don't have native comments. If you use Giscus (GitHub-based), Disqus, or Commento, each has its own spam handling built in — no need for Akismet.
Is Cloudflare Turnstile free?
Yes, completely free with no usage cap. Two lines of integration: add a script tag and a Turnstile widget. It's privacy-friendly (no biometric tracking) and converts better than reCAPTCHA v2's checkbox.
How do I block disposable email addresses?
Use a service like Kickbox, ZeroBounce, or a free disposable-email regex list checked at form submission. Stripe and Resend also flag suspicious email patterns automatically for paid services.
Will my form submission rate drop after removing Akismet?
No — Akismet was filtering submissions invisibly, not improving deliverability. With Turnstile + honeypot, legitimate users complete forms without seeing any challenge in 95%+ of cases.

Guides for Replacing Akismet Anti-Spam

In-depth guides and tutorials to help with your migration

Ready to Leave WordPress Behind?

Migrate your entire WordPress site to Next.js - including replacing Akismet Anti-Spam functionality.

Start Free Migration

Browse all migration guides →