Last updated: January 19, 2023
When a visitor enters their email address into the default email field on a HubSpot form, it is automatically validated by HubSpot. If the email address is not formatted correctly, or if the email has globally bounced, the form cannot be submitted.
You can provide additional protection against spam form submissions by enabling CAPTCHA on your form or blocking specific email domains and free email providers.
Enable CAPTCHA
Enabling CAPTCHA adds a step to your form verifying that a visitor is not a robot, before they can submit the form. To enable CAPTCHA on a form:
- In your HubSpot account, navigate to Marketing > Lead Capture > Forms.
- Hover over a form and click Edit.
- In the left pane, under the Other Form Elements section, click to toggle the Captcha (SPAM Prevention) switch on.
- In the top right, click Update or Publish. After enabling CAPTCHA, Google's invisible reCAPTCHA will appear on your form when you add the form to a page. If Google determines that a visitor is suspicious, they must solve a CAPTCHA challenge before they can submit the form.
Please note:
- If your regular form or pop-up form includes a follow-up email, a CAPTCHA will automatically be added to the form. To remove the CAPTCHA from the form, delete the follow-up emails in the Automation tab of the form editor.
- If CAPTCHA has been enabled on the form, form submissions from the Submit data for a form API or other form integrations will not be accepted.
Block specific email domains or free email providers
If you have a Marketing Hub Starter, Professional, or Enterprise subscription, you can block specific email domains or free email providers to encourage your visitors to provide high-quality business email addresses. These settings are configured on an individual form level and can be used on both forms and pop-up forms.
