Can a n8n form get spammed if posted publicly?

Questions
1

Hey everyone,

I’m not really new to n8n but I’mtrying to create a simple email entry form for my site. I’m worried about getting spammed, but I don’t see any CAPTCHA options. Since it’s a public form, I can’t use Basic Auth. How does n8n handle spam prevention? Am I missing something, or is there a better way to approach this? The form is just for visitors to request more info, and I’d like to automate adding them to my CRM.

Thanks for any help

2

Hey @Jamiatay my friend deployed many n8n forms for lead capture and spam hasn’t been a major issue for him with some basic precautions. The webhook URL’s obscurity helps deter bots since it’s not easily discoverable. While n8n doesn’t have traditional CAPTCHA, the obscurity of the webhook URL combined with other precautions can effectively minimize spam on public forms.
Hope this helps

1 Like
3

Thank you bringazher just to clarify, you mean the n8n form that pops up into a small form window right? Just asking because you mentioned webhook URL.

4

@Jamiatay n8n forms can get spammed if they’re public and not protected. Here are some ways to secure them:

  1. Basic protection: You can enable rate limiting or use HTTP node authentication (like API keys) in n8n.
  2. Better options:
    1. Use a form service like Typeform or Google Forms that has built-in spam protection and connect it to n8n.
    2. Create your own form on your site with CAPTCHA and send the data to n8n.
    3. Use a hidden n8n webhook URL with some server-side validation.

For lead capture, you can use services like Calendly or Hubspot that have spam protection and work well with n8n for automating your CRM.
Hope this helps

1 Like
5

And @Jamiatay kindly mark as the solution if this helps

6

Thank you, BTW I have few other questions but I still have to complete some codes then come back again.