Double Opt-In for Contact Form 7 – Secure, GDPR-Compliant vs Anti-Spam Protection – No API Key, GDPR Friendly

Double Opt-In adds a mandatory email verification step to your Contact Form 7 forms. When a visitor submits your form, the original mail is not sent immediately. Instead, the plugin: Stores the submission in a secure database table. Sends a confirmation email with a unique, time-limited link. Only after the visitor clicks that link is the original form mail delivered. This ensures: Only valid, verified email addresses reach your inbox. GDPR / DSGVO requirements are met with proper consent tracking, IP logging, and data retention. Your database stays clean and reliable — no fake or mistyped addresses. Out-of-the-box support for Contact Form 7. Additional form systems — Avada, Elementor, Gravity Forms, WPForms — are available as separate addon plugins. How It Works A visitor fills out your Contact Form 7 form and clicks submit. The plugin intercepts the submission, stores the form data, and generates a unique hash. A confirmation email is sent to the visitor’s email address containing a verification link. The visitor clicks the link. The plugin verifies the hash, marks the opt-in as confirmed, and sends the original form mail (as if the form was just submitted). The confirmed opt-in is logged in the admin dashboard with timestamps and IP addresses for full GDPR compliance. Quick Start Read the Quick Guide Free Features Block-Based Email Templates — build your confirmation email from heading, text, button, spacer, divider and placeholder blocks Double Opt-In for Contact Form 7 — per-form activation with full CF7 integration Centralized Form Settings — manage all form integrations from a single admin panel Email Template Presets — start from a pre-built template (one saved template on the free version) Send Test Email — preview your confirmation emails before going live Custom Confirmation Pages — redirect users to a specific page after confirmation Dynamic Conditions — enable opt-in based on user input (e.g. only when a checkbox is checked) Delete Confirmation Modal — safety dialog before deleting an opt-in record to prevent accidental deletion GDPR Consent Export — export individual consent records as JSON or CSV directly from the opt-in detail view CAPTCHA Compatibility — automatically bypasses Forge12 Captcha, Google reCAPTCHA, and hCaptcha during opt-in confirmation to ensure mail delivery Rate Limiting — configurable IP and email rate limits to prevent abuse Error Redirect Page — redirect users to a custom page when an opt-in error occurs (rate limit, invalid email) Token Expiry — confirmation links expire after a configurable time period GDPR Data Storage — tracks Form ID, Email, Registration/Confirmation Date & IP, Consent Text GDPR Anonymization — anonymize personal data instead of deleting it WordPress Privacy Tools — integrates with WordPress personal data export and erasure requests Automatic Cleanup — configurable auto-deletion of confirmed and unconfirmed entries Category System — organize opt-ins into categories for better management Pagination & Search — search and filter opt-in records in the admin dashboard Admin Tooltips — contextual help tooltips throughout the admin interface WordPress Multisite — network-wide activation creates tables on all sites automatically Developer Hooks — 43 action hooks, 71 filters, and 11 typed events for full extensibility Pro Features Unlock the full potential of Double Opt-In with the Pro version: Additional Form Integrations: Double Opt-In for Elementor Forms — seamless integration with Elementor’s form widget Double Opt-In for WPForms — full support for WPForms submissions Double Opt-In for Gravity Forms — complete Gravity Forms integration Email Validation & Spam Protection: Unique Email Validation — prevent duplicate submissions per email address (block, silent, or redirect mode) MX Validation — verify that the email domain has a valid mail server before sending Domain Blocklist — block disposable and temporary email domains Email & Communication: Double Opt-Out System — unique opt-out links per submission with confirmation emails Opt-In Reminder System — automatic reminders for unconfirmed opt-ins via cron Visual Email Editor — drag & drop editor with live preview and mobile preview, plus unlimited saved templates Resend Confirmation — resend the confirmation email to a single recipient from the admin dashboard Conditional Email Templates — dynamic content blocks based on form data Multi-Column Layouts — 2-column, 3-column, and sidebar layouts in the email editor Image & Social Blocks — add images and social media icons to your emails Analytics & Export: Analytics Dashboard — charts and statistics for opt-in/opt-out rates CSV Export — export all opt-in records for external processing User Management: Auto User Creation — automatically create WordPress users after opt-in confirmation with configurable role assignment Support: Premium Support — priority email support Privacy & Telemetry As of version 5.1.7 the plugin no longer transmits any telemetry. The daily job that used to send a usage snapshot has been removed, and an update also removes it from the WP-Cron schedule of sites that already had it. Usage counters (how many opt-ins were confirmed, for example) are still kept, but they never leave the site. They are stored in a single WordPress option and are used only in the admin — for instance to decide whether the plugin has been useful long enough to ask you for a review. We never sell or share data. GDPR / DSGVO Compliance No personal data, no cookies, no user tracking. Nothing is sent to any external server. Counters stay in your database and are removed when you uninstall the plugin. The telemetry setting under Double Opt-In > Settings is retained: should transmission ever be reintroduced, it will be honoured before anything is sent. Bundled assets The admin interface uses the Inter typeface. It is self-hosted — the font file is embedded in the plugin’s own admin bundle, so opening the plugin’s screens does not contact Google Fonts or any other third party. Inter is licensed under the SIL Open Font License 1.1 (see licenses/inter-OFL-1.1.txt).

Is Contact Form 7 spam destroying your mornings? No API key. No data leaving your server. No charges for commercial use. Just effective spam protection that works the moment you activate it. What Gets Protected (FREE) ✅ Contact Form 7 – Block bot spam automatically ✅ WPForms Lite & Pro – Stop automated submissions ✅ Jetpack Contact Forms – Filter bot spam instantly ✅ Fluent Forms – Eliminate bot attacks ✅ SureForms – Block bot spam submissions ✅ WordPress Comments – Clean comment spam from badbots ✅ Business sites included – No commercial fees ever Works immediately after activation. No configuration. No learning curve. No monthly costs. How It Works 3 Steps to Spam-Free Contact Forms: Install – Search “Contact Form 7 spam” in your WordPress dashboard Activate – One click to turn on protection Relax – Your Contact Form 7 and WPForms and others are now protected from bots The moment you activate, spam bots are automatically blocked on all your forms and comments. No settings to configure. No technical knowledge required. No ongoing maintenance. Most users report 95-100% spam reduction within the first 24 hours. Tomorrow morning, check your inbox. Instead of dozens of spam submissions, you’ll see only real customer inquiries. That’s the peace of mind this plugin delivers. Why Contact Form 7 Needs This Contact Form 7 is WordPress’s most popular form plugin with over 5 million active installations. It’s lightweight, flexible, and completely free. But it doesn’t include spam protection. Without protection, Contact Form 7 sites get hammered. Bot networks discover unprotected forms and flood them with submissions. Your inbox fills with junk. You waste time sorting real inquiries from spam. Worse, you risk missing legitimate customers buried in the noise. This plugin fixes that problem. For free. Forever. Free vs Pro: What You Get FREE Version (Most Sites Need Only This): ✅ Contact Form 7 bot spam blocked ✅ WPForms automated spam stopped ✅ Jetpack forms protected ✅ Fluent Forms secured ✅ SureForms protected ✅ WordPress comment spam eliminated ✅ Works on business/commercial sites ✅ Spam statistics dashboard Automated bots cause 95%+ of spam. The free version handles this completely. PRO Version (For Advanced Needs): ⚡ Private Machine Learning human spam detection (runs on your own server, learns from your spam) ⚡ Gravity Forms integration ⚡ WooCommerce registration protection ⚡ Email quarantine for review ⚡ Custom IP blocklists ⚡ Allow/deny pattern rules ⚡ Priority support Most Contact Form 7 users never need Pro. But if you’re getting manually-typed spam or need enterprise features, Pro has you covered. Why This Works Better Than CAPTCHA CAPTCHA makes your visitors prove they’re human by solving puzzles. It’s annoying, hurts conversions, and still lets some spam through. This plugin takes a smarter approach: Invisible honeypot fields – Bots can’t resist filling hidden fields that humans never see Timing analysis – Bots submit forms instantly; real people don’t Behavioral fingerprinting – Bot patterns are detectable and consistent No user friction – Your visitors never know the protection exists Lightning fast – All processing happens locally on your server Your Contact Form 7 stays fast. Your conversion rates stay high. Spam disappears. It just works. Quietly. Effectively. Completely free. Common Questions Answered “Will this work with my existing Contact Form 7 setup?” Yes. It integrates automatically with all CF7 configurations, custom fields, and extensions. Nothing breaks. Spam just stops. “I’m not technical. Can I install this?” If you can install a WordPress plugin, you can use this. There’s literally nothing to configure. Install, activate, done. “What about sites that aren’t in English?” Works perfectly on all languages. The spam detection doesn’t depend on language – it detects bot behavior patterns. “My site sells products. Do I have to pay?” No. Unlike some popular anti-spam solutions that charge business sites, this is free for commercial use. No exceptions. No hidden fees. Ready to Stop Contact Form 7 Spam? Installation takes 30 seconds: In your WordPress dashboard, go to Plugins → Add New Search for “Contact Form 7 spam” Click Install, then Activate Done – your forms are now protected Check your email tomorrow. Enjoy the silence. For detailed statistics and settings, visit Settings → Anti Spam after activation. Go Pro Most Contact Form 7 users never need Pro – the free version eliminates their spam problem completely. What makes Pro unique – private Machine Learning: Unlike cloud filters that ship your visitors’ messages off to an external service, the Pro classifier runs entirely on your own server. It learns from the spam you classify, gets smarter the more you use it, and never sends data to a third party outside your control – no external cloud service, no data sharing, no privacy trade-off. Pro delivers: ✅ Private Machine Learning Human Spam Detection – Stops manually-typed spam that gets past basic filters, using Machine Learning that runs entirely on your own server and learns from your spam classifications – your visitors’ data never leaves your site or goes to a third party outside your control ✅ Gravity Forms Integration – Complete protection for premium form users ✅ WooCommerce Registration Blocking – Stop fake account spam ✅ Email Quarantine – Review and rescue any legitimate messages caught by mistake ✅ Quarantine / Audit Log – Full spam traceability: see every submission the plugin checks, allowed or blocked, and exactly why it was decided (bot trap, Machine Learning human-spam score, single-word, deny rule, real-time IP blocklist or allow list) – with the analysed content, masked IP and country, plus one-click allow/deny actions to fix any mistake ✅ Custom Allow/Deny Rules – Block specific IPs, patterns, or keywords ✅ IP Blocklist Checking – Automatic blocking of known spam networks ✅ Priority Support – Get help directly from the developers Perfect for: – High-traffic sites getting manually-entered spam – Agencies managing multiple client installations – Enterprise sites requiring advanced controls – Gravity Forms and WooCommerce users Start Your Free 30-Day Pro Trial Try Pro features risk-free for 30 days. A card is required to start, but you won’t be charged if you cancel before the trial ends. No pressure, no hassle.