Captcha – Invisible Spam Protection

by ACRIS E-Commerce GmbH

Rating: 5.0

Downloads: <100

Protect your Shopware shop effectively against spam and bots with the invisible ACRIS Honeypot Captcha – centrally controllable via the shop master data.

Annually €4.08* /month €58.80 * €49.00* /year 16.67% discount In comparison to the regular monthly price

Monthly €4.90* /month Cancelable monthly

Compatible with:

6.4.0.0 - 6.7.13.0

Includes:

Free trial month

The subscription starts with a free trial month during which it can be canceled at any time.

All updates

During the subscription all released updates are included for free

Support from the Extension Partner

In case you have any questions or problems with your extension you can always ask the Extension Partner for help during the subscription.

Description

Highlights

Invisible, user-friendly and resource-efficient spam protection
Protection of email addresses against automated detection by bots
Optionally require user interaction via mouse, touch or keyboard
Central activation via the shop basic settings

Features

ACRIS Honeypot as an additional CAPTCHA method in Shopware
Invisible CAPTCHA field for detecting automated form submissions
Define an individual name for the hidden Honeypot field
Configure the minimum waiting time before a form can be submitted in milliseconds
Block form submission if the defined minimum waiting time has not been reached

Optionally require user interaction before submitting a form
Detect mouse movements, touch interactions and keyboard input as user interaction
CAPTCHA is only enabled after the waiting time has elapsed and the required user interaction has taken place
Protection for Shopware forms with an active CAPTCHA function
Additional CAPTCHA support for newsletter registration
Protection for password recovery
Protection for password reset
Automatically add ACRIS Honeypot to the active CAPTCHAs upon activation
Protect email addresses from automated bot scraping via JavaScript
Assemble the complete email address only when the link is clicked or tapped

Show more Show less

About the Extension

Purpose of the plugin

The plugin protects Shopware forms from automated spam submissions using an invisible Honeypot CAPTCHA. Bots are detected and blocked using various validation mechanisms without requiring visitors to solve visible CAPTCHA challenges. This keeps form usage convenient for customers without additional input steps.

Invisible Honeypot protection
The Honeypot mechanism works in the background and adds a field to forms that is invisible to regular visitors. Automated bots that fill in this field can therefore be detected and the corresponding form submission can be blocked.

Additional validation through a minimum waiting time
A minimum waiting time can be defined for form submissions. If a form is submitted faster than specified, the request can be identified as an automated submission and blocked. This provides an additional layer of protection alongside the classic Honeypot mechanism.

Optionally require user interaction
It can optionally be specified that a user interaction must take place before a form can be submitted. Mouse movements, touch interactions or keyboard input can be taken into account, for example. This makes it possible to distinguish automated form submissions from genuine users even more effectively.

Activate CAPTCHA centrally for Shopware forms
ACRIS Honeypot can be activated centrally as a CAPTCHA method in Shopware and is then available for the corresponding protected forms. A separate configuration for each individual form is not required.

Protect newsletter and password functions
In addition to regular Shopware forms, CAPTCHA protection can also be used for newsletter registration as well as password recovery and password reset. This provides additional protection for areas that are frequently targeted by automated requests.

Protect email addresses from bots
Email addresses in individually inserted links can also be protected from automated scraping by bots. The username and domain are stored separately in the HTML code and are only combined into a complete email address when the user interacts with the link.

Seamless use for visitors
The protection works without visible CAPTCHA challenges and does not interfere with the normal user flow. Protected email links continue to behave like regular mailto links and automatically open the configured email application when interacted with.

Purpose of the plugin

This extension is highlighted as part of the Premium Partner Program and can therefore be displayed with priority in the store.

Details

Available: English, German
Latest update: 10 August 2026
Publication date: 20 October 2025
Version: 4.3.0
Category: Administration

Resources

Reviews (1)

Average rating

5.0

Based on 1 reviews

5.0 Functionality

5.0 Usability

5.0 Documentation

5.0 Support

Write a review

If you downloaded this extension you can write a review in the Shopware Account.

Write a review

Sort by

Top Plugin & super Support

5.0

by administrator administrator

18 November 2025 16:27

Plugin lief nach Erstinstallation in der Testphase zwar erst nicht, der Support hat sich dem Problem aber rasch angenommen und es umgehend gelöst - herzlichen Dank dafür. Jetzt tut es, was es soll und wir sind sehr happy damit.

5.0 Functionality

5.0 Usability

5.0 Documentation

5.0 Support

About the Extension Partner

ACRIS E-Commerce GmbH

See all extensions

Partner Status

Shopware
Bronze Partner
Shopware
Premium Extension Partner

Details

Ø-Rating: 5

Average rating of 5 out of 5 stars
Partner since: 2015
Extensions: 214
Certifications: 7

Support

Based in: Austria
Speaks: German, English
Response time: Very quickly

Shopware 6 certified

Installation

Open the Plugin Manager via Settings > System > Plugins
Upload, install and activate the plugin

After activation, ACRIS Honeypot is available as an additional CAPTCHA method in Shopware.

Activate ACRIS Honeypot

Settings → Shop → Basic information

To use the Honeypot protection, ACRIS Honeypot must be selected under the active CAPTCHAs. After activation, the protection is used for the CAPTCHA forms supported by Shopware. In addition, ACRIS Honeypot also supports newsletter registration as well as password recovery and password reset.

Plugin configuration

Extensions → My Extensions → ACRIS Honeypot Captcha → Configure

CAPTCHA settings

Hidden field CAPTCHA name: Defines the name of the invisible Honeypot field. If no custom value is specified, the plugin uses acris_firstname_confirm by default. To improve the detection of automated bots, it is recommended to use an individual field name for the shop. The value must not contain spaces or special characters.
Minimum waiting time before forms can be submitted (in milliseconds): Defines how long users must wait before a form can be submitted successfully. If the form is submitted faster than the configured time, the submission is blocked.
Require user interaction (mouse pointer, touch, keyboard input): Defines whether additional user interaction is required before the form is enabled. Mouse movements or clicks, touch interactions and keyboard input are taken into account as interactions.

Protect email addresses from bots

In addition to CAPTCHA protection, individually inserted email links can be protected from automated scraping via JavaScript. The username and domain are stored separately and are only combined into a complete email address when the link is clicked.

A protected email link can be added, for example, as follows:

Send email

data-email-protect="true": Enables email protection for the link.
data-email-protect-user: Contains the part of the email address before the @ symbol.
data-email-protect-domain: Contains the domain of the email address after the @ symbol.

When the link is clicked or tapped, the complete email address is automatically assembled and the configured email application is opened via a mailto link.

Notes

ACRIS Honeypot works invisibly for visitors and does not require traditional CAPTCHA challenges.
JavaScript must be enabled in the browser for the minimum waiting time, user interaction and email protection features to work.
The individually selected name of the hidden CAPTCHA field must not contain spaces or special characters.