Types of honeypots

A honeypot is a trap in a website's code or a form. Real visitors never see or touch it, but bots often do. Tapper flags or blocks a bot that triggers one as likely invalid traffic.

The kinds of honeypot

• Hidden form. A full form that is visually hidden. Bots may fill it in and submit it.
• Hidden text field. A hidden field, such as a fake "first name" input. Bots often fill every field they find.
• Hidden checkbox or radio button. If one is checked on submission, the visitor is probably a bot.
• Hidden button. If it is clicked, the visitor is probably an auto-clicker or a headless browser.
• Fast form submission. A form submitted within about two seconds of loading is suspicious, because people take time to read and fill a form.
• Hidden variable. A hidden value in the page that bots which run scripts may overwrite.
• Hidden link. If it is clicked, the visitor is probably a bot moving through the page without seeing it.

There is nothing to set up: Tapper's monitoring script takes care of it on your pages.