Hi Bernice,
Thanks for reporting this. Sorry to hear you’ve been hit with spam registrations.
I’ve just released version 1.6.0 which adds exactly what you need. It includes:
- A honeypot field — active automatically, no setup required. Catches simple bots that blindly fill in all form fields.
- CAPTCHA support — choose between Google reCAPTCHA v2 (checkbox), Google reCAPTCHA v3 (invisible, no user interaction needed), or hCaptcha (privacy-friendly alternative).
- A log of blocked attempts — visible under WP Admin → Volunteers so you can see what’s being stopped.
To enable CAPTCHA after updating:
- Go to Settings → General → Security
- Choose your preferred provider
- Paste in your site key and secret key from the provider’s admin console
All three providers have a free tier that’s more than sufficient for a volunteer registration form.
Please update to 1.6.0 and let me know if that clears up the spam for you! Also let me know if something does not work as intended. I tested it on my end but for first time integrators there is always a bit more risk attached 😉
Best,
David