WP Armour Extended

What the honeypot catches

WP Armour Extended includes review and filtering controls to WP Armour’s honeypot protection. JavaScript inserts a honeypot field into supported forms. Bots that cannot use JavaScript cannot fill that field to pass the check, so users do not have to complete a CAPTCHA or an extra verification field. The honeypot targets automated submissions; people can still submit spam manually.

What spam records display

Extended records spam submissions so administrators can review what bots tried to send. It can log IP addresses tied to bot activity and block an address after multiple spam submissions. An additional IP filter includes another layer of filtering, while keyword rules mark submissions as spam when they contain words or phrases selected by the administrator.

Reviewing recorded submissions can help identify recurring patterns. IP controls address repeated activity from the same address, and keyword rules flag entries that match the terms you specify.

Supported forms and WordPress areas

WP Armour protection is listed for WordPress comments and registration, bbPress forums, Contact Form 7, Gravity Forms, WPForms, Formidable Forms, Caldera Forms, Toolset Forms, Elementor Forms, Fluent Forms, the Divi Theme Contact Form, Theme My Login, and WooCommerce Reviews Pro. Gravity Forms support includes non-Ajax single-page forms; Extended also supports Ajax-based and multi-step Gravity Forms.

WP Armour Extended adds WooCommerce checkout and registration, including card testing orders, and Easy Digital Downloads checkout and registration. Other listed integrations include QuForm, Ninja Forms, MC4WP: Mailchimp for WordPress, S2 Members, Ultimate Members, Bricks Builder Form, BricksForge Pro Form, Beaver Builder Contact Form Module, Strong Testimonials, Formcraft Form, Forminator, WS Form, YITH Easy Login & Register Popup for WooCommerce, UsersWP, Youzify, MailPoet, Brevo, JetForm Builder, HTMLform, the Avia Enfold Theme, BuddyPress, BuddyBoss, Sure Forms, and Everest Forms.

Spam handling and privacy details

The add-on description states that WP Armour is GDPR compliant and uses no tracking, cookie storage, or external server calls. It also says spam filtering does not rely on external API calls such as those used by Akismet or CleanTalk.

Set up and review protection

Install and activate WP Armour Extended, then check which supported form integrations your site uses. Configure spam records, IP logging, repeated-IP blocking, and keyword filtering as needed. Review recorded submissions and adjust the filtering rules as your site's spam patterns develop.