Honeypot

LaunchFast includes honeypot fields as a spam prevention mechanism. Honeypot fields are hidden form inputs that real users never see or fill in. Bots that automatically fill all fields will trigger the honeypot and their submissions will be rejected.

How it works

The implementation uses remix-utils honeypot utilities. A hidden field is added to forms, and submissions are checked on the server to verify the field was not filled in.

Configuration

The honeypot requires a HONEYPOT_SECRET environment variable. This is set automatically by the LaunchFast installer. For manual setup, generate a random string and add it to your .env file and Fly secrets:

fly secrets set HONEYPOT_SECRET="your-random-secret" --app your-app-name