WP Armour – Honeypot Anti Spam

What is WP Armour?

WP Armour – Honeypot Anti Spam is a security plugin that blocks automated spam submissions without annoying real users. It uses a client-side honeypot technique to trap bots, not people. Developed by Dnesscarkey, the plugin is six years old and has grown to over 400,000 active installs. Its rating is a perfect 5.0 out of 5 stars from 1,411 ratings, with 99% of those being five-star reviews and zero percent one-star. This makes it one of the highest-rated spam solutions in the WordPress repository.

The plugin requires no API keys or external services. It works silently by injecting a hidden form field via JavaScript. Spam bots cannot execute JavaScript, so they miss the field and fail the test. Human visitors never see or interact with the trap. This approach keeps the user experience friction-free while stopping the majority of bot-driven spam.

Key Features of WP Armour

• Client-Side Honeypot Field – The honeypot field is added via JavaScript, not PHP. Bots that skip JavaScript cannot fill the hidden field, so their submissions are blocked automatically.
• Zero External API Calls – Unlike Akismet or CleanTalk, WP Armour sends no data to third-party servers. All spam filtering happens locally on your site, which also makes it GDPR compliant.
• Free Support for 15+ Form Types – The free version covers WP Comments, registration, Contact Form 7, Elementor Forms, Divi Contact Form, WPForms, Fluent Forms, and more. Each integration activates without any configuration.
• Unique Honeypot Field Names – The plugin generates a distinct field name for each WordPress installation. This prevents bots from learning to bypass a static pattern.
• Built-in Administrator Test Widget – When logged in as admin, a test widget appears below supported forms. It confirms the honeypot is active and lets you simulate a spam submission to verify protection.
• IP Logging and Blocking (Extended Version) – The paid WP Armour Extended add-on logs spam bot IP addresses and blocks them after repeated attempts. This reduces bandwidth waste and server load.
• WooCommerce Checkout Protection – The extended version blocks spam during WooCommerce checkout and registration, including card testing attacks from bots.
• No Captcha Required – The plugin eliminates the need for reCaptcha, invisible captcha, or any visual verification. Users never see a puzzle or checkbox.

Who Should Use WP Armour?

WP Armour is ideal for site owners who want a set-and-forget spam solution. It requires no technical skill to activate. After installation, the plugin immediately protects all supported forms without any setup. This makes it a strong choice for bloggers, small business owners, and non-developers who manage their own sites. The 400,000+ active installs and 99% five-star rating confirm that a wide range of users find it effective and easy to use.

The plugin is also well-suited for membership sites, forums, and ecommerce stores. It supports BuddyPress, BuddyBoss, BBPress, and WooCommerce registration forms out of the box. For sites that handle user-submitted content, the free version covers the most common attack vectors. Users who need deeper protection, such as IP blocking or support for Ninja Forms and Gravity Forms Ajax submissions, can upgrade to the paid Extended version.

Installation & Setup

You can install WP Armour directly from the WordPress plugin directory by searching for "WP Armour – Honeypot Anti Spam" and clicking Install. Alternatively, download the zip file and upload it via the Plugins menu. After activation, the plugin works immediately on all supported forms. No configuration is required. If you need to adjust settings, a new "WP Armour" menu appears in your WordPress admin panel.

Support & Community

Support response data from the last two months shows 7 open support threads and 1 resolved thread, giving a resolution rate of 14%. This is below average for a plugin of this size. However, the plugin's design is so straightforward that most users never need support. The 99% five-star rating across nearly 1,411 reviews suggests that the vast majority of installations work without issues. Users praise the plugin for its simplicity and effectiveness, often noting that spam stopped completely after activation. The low support volume may reflect that the plugin simply works as advertised for most people.