Discover, trust, install: FAIR 1.0 is here
CF7 Apps – [Honeypot and hCAPTCHA for Contact Form 7]
Version: 3.1.1
Description
Add extra Spam Protection functionalities to your Contact Form 7 forms with CF7 Apps.
Contact Form 7 is one of the most popular form plugins for WordPress, but it lacks many advanced features that modern websites need. CF7 Apps adds extra Spam Protection functionalities to your Contact Form 7 forms, introducing honeypot and hCaptcha options.
👉 Get Support: Click Here
👉 Check out the Documentation
What CF7 Apps Can Do for You ?
Right out of the box, CF7 Apps includes:
✅ Honeypot App
✅ hCaptcha App
✅ Database Entries App
💡 Suggest a Feature
And that’s just the beginning.
🌟 Save and Manage CF7 Form Submissions
The Entries Database App stores all Contact Form 7 submissions directly to your WordPress database. Easily filter entries by form or date, view individual CF7 submissions, and export or delete them when needed. This ensures you never lose important leads or messages, even if emails fail to deliver.
🌟 Add a Honeypot Field to Prevent Spam
Our Honeypot Contact Form 7 extension creates a hidden field inside your Contact Form 7 forms. Real users never see it, but bots do—and that’s how the bots fall for the trap. It blocks automated spam before it even hits your inbox.
🌟 Add hCaptcha to Contact Form 7
Protect your forms from spam bots using hCaptcha, a privacy-friendly alternative to Google reCAPTCHA. This extension integrates directly with CF7 and works instantly after setup. No coding is required, and no extra plugins are needed. Just set up your site keys and you’re done.
NOTE:
The best thing is that both features work independently. You can run them alone or together based on your site’s needs.
Real Use Cases for CF7 Apps
With the CF7 Apps, you can do the following:
✔️ Trap bots using a honeypot field without affecting users
✔️ Add hCaptcha to Contact Form 7 for privacy-first anti-spam
✔️ Store and manage Contact Form 7 entries directly in WordPress
Why Should You Install CF7 Apps?
- Works exclusively with Contact Form 7
- Modular design — activate only the features you need
- Lightweight — no unnecessary code or bloat
- Built for form security, user control, and advanced customization
- Continuously updated with new apps and requested features
We built CF7 Apps for users who want more power without abandoning the simplicity of Contact Form 7.
Contribute or Report Issues
Do you have a feature request or bug to report? Contact us via the official Support Channel.
Installation
How to Get Started
- Install the CF7 Apps plugin
- Go to the CF7 Apps dashboard
- Activate the addons you want (like hCaptcha or Honeypot)
- Configure and use the new feature immediately in your Contact Form 7 form.
No code. No clutter. These are just all the essential add-ons that extend the capabilities of Contact Form 7.
Contribute or Report Issues
Do you have a feature request or bug to report? Visit the plugin’s support section on WordPress.org or contact us via the official Support Channel.
Altering the Honeypot Output HTML [ADVANCED]
While the basic settings should keep most people happy, we’ve added several filters for you to further customize the honeypot field. The three filters available are:
wpcf7_honeypot_accessibility_message– Adjusts the default text for the (hidden) accessibility message (can now be done on the settings page).wpcf7_honeypot_container_css– Adjusts the CSS that is applied to the honeypot container to keep it hidden from view.wpcf7_honeypot_html_output– Adjusts the entire HTML output of the honeypot element.
For examples of the above, please see this recipe Gist.
Screenshots
CF7 Apps Dashboard.
Honeypot Settings.
hCaptcha Settings.
Contact form 7 hCaptcha Tag.
CF7 Apps Tags.
Faq
Activate the hCaptcha App inside CF7 Apps, enter your site keys, error messages, and save settings. That’s it. Now, you’ll see the hCaptcha tag in your Contact Form 7 form settings.
Contact Form 7 is a long-standing WordPress plugin that lets you build and manage contact forms on your site. It supports multiple forms, customization, and various integrations—all without writing any code.
No. Each addon works independently. You only activate the features you want. That keeps your website fast and your backend clean.
If you discover a security vulnerability, please report it to us via the official Support Channel. Our team will review, verify, and fix all security-related reports responsibly.
You sure can, and many users have indicated this helps stop even more spam, as it increases your chances that a bot will get caught in the trap. Just make sure each Honeypot field has a unique name.
Yep! See the Installation section for more details and this Gist for examples.
No, Contact Form 7 does not store submissions by default. With the CF7 Apps Entries Database App, you can log every entry directly in your WordPress dashboard and access them anytime.
Yes, the Entries Database App lets you filter submissions by specific forms or date ranges, making it easier to manage and review the entries you need.
You can delete individual submissions or bulk delete multiple entries directly from the Entries tab in the CF7 Apps dashboard with just a few clicks.
Please report security bugs found in the source code of the CF7 Apps – [Honeypot and hCAPTCHA for Contact Form 7] plugin through the Patchstack Vulnerability Disclosure Program. The Patchstack team will assist you with verification, CVE assignment, and notify the developers of this plugin.
CF7 Apps is a third-party plugin and is not officially associated with or endorsed by Contact Form 7.
Reviews
Not great
By 
Long time user of the plugin in multiple websites now in search for an alternative.
The takeover has been rough and now i have another plugin claiming space in the menu. I guess everything was according to the rules but still feels wrong.
Useless Entry in WordPress Menu
By 
The plugin does what it should but why you need to create a dashboard for your plugins.
Just public the two plugins separately and let the WordPress backed clean.
I really think this should be avoided by any Plugin or even prevent from WordPress itself. Users can simply access the settings from the plugins menu.
I don't know if it is a ego thing or something that every plugin has to have its on Menu entry and dashboard.
seems like a hostile takeover of the real CF7
By 
It feels like the plugin was captured from CF7, it appears to me like a hostile takeover, bringing bloat into my dashboard.
Worst of all, it suddenly appeared beside my plugins, never actively installed it by myself.
yet another totally useless dashboard
By 
I've been using this plugin for several years and even published a tutorial in French (Comment configurer Honeypot for Contact Form 7) on my own website to help people set it up right.
I really liked the way it was lightweight, efficient, and non-invasive. What a pity to discover in an update: yet another totally useless dashboard.
I understand the need for upsells to fund the development process, I really do. But it pisses me off to see this enshitification something that was high-quality before.
It really makes people want to fork the plugin to clean it up.
Please bring us back the quality plugin you made, and stop with the useless option pages for pity's sake.
I feel betrayed
By 
This used to be a simple, free, honeypot plugin for CF7
It has been taken over and now it is a useless piece of bloatware.
Name change leads to confusion
By 
This used to be a really good plugin, but with the recent name change and the new and super confusing migration menu item, I'll probably say goodbye to it. What a shame.
Changing the name of the plugin
By 
Changing the name of the plugin CF7Apps, a bad idea, unethical, gives the misleading impression that the plugin is from the same developer as CF7.
In addition, the migration screen, misleading, adds weight to the site, disappointing.
alert from Avast antivirus: script:snh-gen
By 
<font style="vertical-align: inherit;"><font style="vertical-align: inherit;">La dernière version de Honeypot for Contact Form 7, la version 2.1.3, comporte une alerte de sécurité de l'antivirus Avast : script:snh-gen. En conséquence, j'ai dû réinstaller l'ancienne version. J'espère qu'il s'agit d'un bug et non d'un changement de propriétaire du plugin.</font></font>
UPDATE : In fact, the problem stems from the contact form and the fact that it appears at the same time as the latest update is pure chance. So, if others are reading this topic, the culprit is contact form 7.
C.Thierry
Great plugin and alternative to captchas!
By 
The "plugin" does what it is supposed to do, namely keep SPAM away.
It also works flawlessly with the current WordPress version 6.5.3.
A small tip for those who still receive SPAM:
- Uses at least three hidden fields in different positions within the form
- Give the hidden fields realistic names
- Activate the time check
- Additionally use the label "Quiz" of Contact Form 7
- Deactivate the autoresponder of Contact Form 7
After six months, we still don't receive a single SPAM mail.
Thank you very much for such an ingenious, privacy-friendly "recapcha" alternative!
Perfect for spam
By 
Good choice if don't want to use recapcha
Changelog
3.1.1 – September 29, 2025
- IMPROVEMENT – Added Collapse Icon On CF7 Apps All Apps Menu
- IMPROVEMENT – Added validation on CF7 Apps Installation before Contact Form 7
- FIX – Database Entries Pagination was not working in some cases
- FIX – PHP error when upgrading from older versions
- FIX – Database Entries tab was not visible in some cases
3.1.0 – September 17, 2025
- NEW – Introducing Database Entries.
- IMPROVEMENT – Moved CF7 Apps under Contact Form 7.
3.0.1 – September 02, 2025
- Code Optimization
3.0.0 – July 16, 2025
- NEW – Introducing CF7 Apps, All new Dashboard.
- NEW – Introducing hCaptcha.
2.1.7 October, 13, 2024
- Fixed compatibility issues with CF7 6.0
- Tested compatibility with latest WordPress (Version 6.7)
2.1.6 October, 05, 2024
- Fixed compatibility issues with CF7 6.0
2.1.5 September, 25, 2024
- Removed warning from CF7 when honeypot is added.
2.1.4 August, 22, 2024
- Added new dependency feature.
- Localized date settings in settings page
- Added new datatable which shows a honeypot used in from or not.
2.1.3 July 01, 2024
- Tweak: Updated old URLs
2.1.2
Changed contributor to WPExperts
2.1.1
Fixes small bug when enabling in bulk with other plugins.
2.1
Added new feature: additional submission time check to improve bot-stopping power! Also, fixed small HTML issue and tidied up shortcode interface.
2.0.5
Improved backwards compatibility. Solves issues when plugin installed on older versions of CF7.
2.0.4
Better error checking for missing config problems.
2.0.3
General code cleanup, better adherence to WP coding standards and fixes for i18n functions.
2.0.2
Replaced text domain constant with plain string for better i18n compatability.
2.0.1
Hotfix for issue with options not being set on upgrade.
2.0
A significant update with a bunch of new things. Please see the release notes.
1.14.1
Minor update to change name to comply with CF7 copyright notice.
1.14
Added do-not-store for when forms are stored in the DB (i.e. Flamingo). Improved wrapper ID masking and customization.
1.13
Additional functionality to improve spam-stopping power.
1.12
Introduces ability to force W3C compliance. See here for details.
1.11
Addresses accessibility concerns regarding a missing label and disables autocomplete to prevent browser autocomplete functions from filling in the field.
1.10
Updates for Function/Class changes related to CF7 4.6. Removed plugin local language support, instead use translate.wordpress.org.
1.9
Added i18n support, French language pack. Thx chris-kns
1.8
Added wpcf7_honeypot_accessibility_message and wpcf7_honeypot_container_css filters, i18n support.
1.7
Provides backwards compatibility for pre-CF7 4.2, introduces ability to remove accessibility message.
1.6.4
Quick fix release to fix PHP error introduced in 1.6.3.
1.6.3
Updates to accommodate changes to the CF7 editor user interface.
1.6.2
Small change to accommodate validation changes made in CF7 4.1.
1.6.1
Small change to accommodate changes made in CF7 3.9.
1.6
Quite a lot of code clean-up. This shouldn’t result in any changes to the regular output, but it’s worth checking your forms after updating. Also, you’ll note that you now have the ability to add a custom CLASS and ID attributes when generating the Honeypot shortcode (in the CF7 form editor).
1.5
Added filter hook for greater extensibility. See installation section for more details.
1.4
Update to make compatible with WordPress 3.8 and CF7 3.6. Solves problem of unrendered honeypot shortcode appearing on contact forms.
1.3
Update to improve outputted HTML for better standards compliance when the same form appears multiple times on the same page.
1.2
Small update to add better i18n and WPML compatibility.
1.1
Small update for W3C compliance. Thanks Jeff.
1.0.0
- Initial release.