Spam Protection
Public forms attract spam bots. PrimoCRM forms include built-in submission safeguards, and you can add a CAPTCHA for stronger protection. Two providers are supported: Google reCAPTCHA and Cloudflare Turnstile.
Choosing a provider
Section titled “Choosing a provider”| Provider | Notes |
|---|---|
| Google reCAPTCHA | Widely used; supports the invisible v3 score model and the checkbox v2 model |
| Cloudflare Turnstile | Privacy-friendly alternative that avoids the Google dependency |
Pick one. You do not need both.
Setting up reCAPTCHA
Section titled “Setting up reCAPTCHA”- Create a site in the Google reCAPTCHA admin console and get a site key and secret key.
- In PrimoCRM, go to Settings then Spam Protection (reCAPTCHA).
- Paste the site key and secret key and enable it.
- Save, then submit one of your forms to confirm the CAPTCHA appears and passes.
Setting up Turnstile
Section titled “Setting up Turnstile”- Create a Turnstile widget in the Cloudflare dashboard and get its site key and secret key.
- In PrimoCRM, go to Settings then Spam Protection (Turnstile).
- Paste the keys and enable it.
- Save and test a form submission.
How it protects forms
Section titled “How it protects forms”When a CAPTCHA is enabled, form submissions must pass the provider’s check before PrimoCRM accepts them and creates or updates a contact. Submissions that fail are rejected, which keeps bot entries out of your contact database.
Beyond CAPTCHA
Section titled “Beyond CAPTCHA”- Ask for only the fields you need. Fewer fields is less attractive to spam and better for real completion. See Field Types.
- Use a Consent field where you need explicit opt-in.
- Keep an eye on new contacts after publishing a form; a burst of junk is a sign to enable or tighten your CAPTCHA.