Simply Forms now includes built-in Shopify form spam protection powered by Cloudflare Turnstile, a modern, privacy-focused alternative to traditional CAPTCHAs.
All form submissions are automatically protected against bots and spam—without puzzles or extra steps for your customers.
What’s new
With this update,
- Most visitors are not required to complete any user interaction
- Privacy-friendly verification is provided without tracking cookies
- Spam protection is enabled by default on all plans
Verification mode (current & upcoming)
Currently, spam protection operates in Invisible mode. Therefore, customers typically will not see any verification challenge during form submission.
In a future release, additional verification display options will also be introduced, allowing merchants to choose the experience that best fits their store:
- Invisible (recommended) – no interaction for most customers
- Automatic – shows a quick check only when needed
- Interactive – displays a challenge if risk is detected
How Shopify form spam protection works
Before a form is submitted, Cloudflare Turnstile silently verifies visitors in the background. As a result, automated spam can be prevented while forms remain fast, smooth, and frictionless for legitimate customers.
Where to manage
Shopify form spam protection is enabled by Simply Forms by default. You can turn it on or off anytime in the Simply Forms app block settings within the Theme Editor. In rare cases, you may want to disable spam protection if some visitors cannot access Cloudflare services due to regional or network restrictions, or if the protection conflicts with other apps or custom scripts and prevents the form from working properly.
Installed merchants will receive a confirmation email. New installations enable the feature automatically.