AccessNow Spam Eater

Stops form spam without CAPTCHAs, using hidden fields, JavaScript and timing checks. Works with core forms, WooCommerce, popular form plugins and your own forms.

AccessNow Spam Eater quietly checks each form submission and turns away the ones sent by bots. Your visitors never have to solve a puzzle or tick a box, and nothing is sent to an outside service.

It’s careful with real people too. Express payment buttons such as Apple Pay and Google Pay keep working, a visitor whose browser fails a check can simply try again, and a blocked address can still log in, so nobody sharing an internet connection with a spammer can lock you out of your own site.

It’s built with privacy in mind. What people type into your forms is never stored. Bots that keep filling in the hidden field are blocked for a short time using a one-way hash of their IP address, and the optional spam log keeps only an anonymised address for 30 days.

The pictures below are the actual screens: choosing which forms to protect, the IP blocking and privacy settings, the blocked addresses and spam log, and a protected form as your visitors see it.

Not on WordPress? The same checks are available for any PHP site or app as Spam Eater for PHP forms, free under the MIT licence.

Features

  • Honeypot, JavaScript, timing and interaction checks, with no CAPTCHA
  • Protects WordPress comment, login, registration and lost password forms
  • WooCommerce classic checkout (express payment buttons included), and My Account login, registration and lost password
  • Contact Form 7, Gravity Forms, WPForms, Formidable, Fluent Forms, Ninja Forms, Forminator, Elementor Pro, Bricks, Beaver Builder and more
  • Protect your own forms with three developer functions, including multi-step forms and forms sent with fetch()
  • Temporary IP blocking for bots, with an Unblock button
  • Works with page caching, and supports sites behind a proxy or CDN
  • Loads its small script only on pages that show a protected form
  • No cookies, no tracking and no outside services

How it compares

Most anti-spam plugins either send what your visitors type to an outside service, or make them solve a puzzle. Spam Eater does neither. Of the most-installed plugins compared here, it is the only one that is free, needs no account, shows visitors nothing and keeps every check on your own site, and it still covers the WooCommerce checkout (classic and block), blocks repeat bots, and lets you add your own words, throwaway-email and IP rules without a paid upgrade. Choose a plugin to compare it with.

Akismet

FeatureSpam EaterAkismet PersonalAkismet Pro
PriceFreePay what you wantfrom $0; personal sites onlyUS$9.95 a month, billed yearly
Visitors see a challengeNoNoNo
What people type leaves your siteNoYesIP address, name, email and message go to AutomatticYes, as Personal
Account or keyNoYes, API keyYes, API key
Forms covered34 pluginsplus WordPress’s own forms and yoursCommentsand form plugins that add Akismet themselvesAs Personal
WooCommerce checkoutYes, classic and block checkoutNo (product reviews only)No (product reviews only)
Blocks repeat botsYesshort blocks; addresses kept only as a one-way hashNoNo
Your own words to blockYeswords and patterns, checked on your site, never storedNoonly WordPress’s own Disallowed Comment KeysNo (as Personal)
Throwaway email addressesYesfrom a list inside the plugin; nothing looked up onlineNoNo
Your own IP allow and block listsYes, both, with rangesNoNo
Slows down password guessingYes (off until you turn it on)NoNo
Spam statisticsDashboard widgetand an optional weekly emailMonthly chartsDaily charts too
WP-CLIYesYesYes
Catches spam typed by peoplePartlywith your own words and patternsYesYes

Antispam Bee

FeatureSpam EaterAntispam Bee (free only)
PriceFreeFree
Visitors see a challengeNoNo
What people type leaves your siteNoNounless you turn on its country or language checks, which use outside services
Account or keyNoNo
Forms covered34 pluginsplus WordPress’s own forms and yoursComments only
WooCommerce checkoutYes, classic and block checkoutNo
Blocks repeat botsYesshort blocks; addresses kept only as a one-way hashNo
Your own words to blockYeswords and patterns, checked on your site, never storedOnly through codethe text stays on your site
Throwaway email addressesYesfrom a list inside the plugin; nothing looked up onlineNo
Your own IP allow and block listsYes, both, with rangesNocountry lists use an outside service
Slows down password guessingYes (off until you turn it on)No
Spam statisticsDashboard widgetand an optional weekly emailDashboard chart
WP-CLIYesNo
Catches spam typed by peoplePartlywith your own words and patternsPartly, with rules you write

WP Armour

FeatureSpam EaterWP ArmourWP Armour Extended
PriceFreeFreeFrom US$19.99 a year
Visitors see a challengeNoNoNo
What people type leaves your siteNoNoNo
Account or keyNoNoLicence
Forms covered34 pluginsplus WordPress’s own forms and yours14 pluginsAbout 30 more plugins
WooCommerce checkoutYes, classic and block checkoutNoClassic checkoutblock checkout not confirmed
Blocks repeat botsYesshort blocks; addresses kept only as a one-way hashNoYes
Your own words to blockYeswords and patterns, checked on your site, never storedNoYes, a keyword filter
Throwaway email addressesYesfrom a list inside the plugin; nothing looked up onlineNoNot confirmed
Your own IP allow and block listsYes, both, with rangesNoAutomatic block list
Slows down password guessingYes (off until you turn it on)NoNot confirmed
Spam statisticsDashboard widgetand an optional weekly emailTotals on its settings pageDashboard widget
WP-CLIYesNoNot confirmed
Catches spam typed by peoplePartlywith your own words and patternsNoPartlywith its keyword filter

CleanTalk

FeatureSpam EaterCleanTalk (paid only)
PriceFreeUS$12 a yearper site, after a free trial
Visitors see a challengeNoNo
What people type leaves your siteNoYeseach submission is checked on cleantalk.org
Account or keyNoYes, access key
Forms covered34 pluginsplus WordPress’s own forms and yoursAbout 80 pluginsthe most of any here
WooCommerce checkoutYes, classic and block checkoutYes, classic and block checkout
Blocks repeat botsYesshort blocks; addresses kept only as a one-way hashYesa firewall that blocks known spam addresses
Your own words to blockYeswords and patterns, checked on your site, never storedPaid add-onset up and checked on cleantalk.org
Throwaway email addressesYesfrom a list inside the plugin; nothing looked up onlineYes, checked online
Your own IP allow and block listsYes, both, with rangesYes, in its online dashboard
Slows down password guessingYes (off until you turn it on)Nosold as a separate security plugin
Spam statisticsDashboard widgetand an optional weekly emailDashboard widgetand a weekly email
WP-CLIYesYes
Catches spam typed by peoplePartlywith your own words and patternsYes

Simple Cloudflare Turnstile

FeatureSpam EaterTurnstile (free only)
PriceFreeFree
Visitors see a challengeNoYes, a Turnstile checkoften one click, or none
What people type leaves your siteNoYesIP address and browser details go to Cloudflare
Account or keyNoYes, a Cloudflare account
Forms covered34 pluginsplus WordPress’s own forms and yoursAbout 30 plugins
WooCommerce checkoutYes, classic and block checkoutYes, classic and block checkout
Blocks repeat botsYesshort blocks; addresses kept only as a one-way hashNo
Your own words to blockYeswords and patterns, checked on your site, never storedNo
Throwaway email addressesYesfrom a list inside the plugin; nothing looked up onlineNo
Your own IP allow and block listsYes, both, with rangesAllow list only, with ranges
Slows down password guessingYes (off until you turn it on)Noa challenge on the login form instead
Spam statisticsDashboard widgetand an optional weekly emailA count of checksin its settings
WP-CLIYesNo
Catches spam typed by peoplePartlywith your own words and patternsNo

Need Spam Eater to protect another plugin? Ask us to add it.

Last checked 2 October 2026. Prices as each vendor listed them on 2 October 2026, in US dollars; a sale price is marked as one. “No” means we found no such feature in the vendor’s own pages, and “not confirmed” that we couldn’t check it. Check their sites for current offers.

They have strengths of their own. Akismet and CleanTalk see spam across millions of sites, so they catch far more of the messages typed by people paid to spam than any on-site rules can. CleanTalk protects the most form plugins and checks addresses against a much larger online list, Antispam Bee has years of comment-spam rules behind it, and a CAPTCHA such as Turnstile stops a determined bot that runs JavaScript. If you want bots stopped without a puzzle, an account or your visitors’ words leaving your site, Spam Eater is built for exactly that.

Updating from Spam Eater by AccessNow

Version 2.2 renamed the plugin and moved it to an accessnow-spam-eater folder. Install it and activate it: it switches the older copy off and keeps its settings. Then delete the older copy.

More projects

View all
Custom build
WordPress Plugin

SCK Blocks

Sunshine Coast Karate's blocks and pattern library: timetable, program cards, testimonials, FAQs, countdown and 27 patterns, kept outside the theme.

Free
WordPress Plugin

AccessNow Image Optimizer

Shrinks big image uploads and serves lighter WebP and AVIF copies to browsers that support them, so pages load faster.

Custom build
WordPress Plugin

SCK Leads

Sunshine Coast Karate's booking and contact forms: every booking stored before it is emailed, a trial form that suggests the right class, and lead…