Protect your Capsule CRM form from bots
In short: To stop spam on a Capsule CRM contact form, download the form from Account Settings › Contact Form, copy its stylesheet line and form code, run them through the SpamKill Setup Wizard and paste the protected code on your page. SpamKill checks every submission without a CAPTCHA and real enquiries still become Capsule contacts. It takes about 10 minutes.
Bots are filling your Capsule contact form with fake people. Protect it with SpamKill and real enquiries keep arriving in Capsule as contacts, with their message and a follow-up task. One limitation to know first: use Capsule's Download Form option; the Embed option loads the form in a frame and can't be protected this way.
- About 10 min
- 6 steps
- Copy and paste one snippet
Last verified on Capsule CRM Free (Contact Form, Download Form) with the SpamKill Setup Wizard
What changes, and what doesn't
- Enquiries still arrive in Capsule as contacts
- The follow-up task Capsule creates for each one
- Your form's fields and Capsule styling
- Every submission is checked before it reaches Capsule
- The form sits on your page instead of in a Capsule frame
- Undo it anytime by putting your old form code back
Before you start
Have these ready so nothing stops you halfway.
- A SpamKill accountNo account yet? Start a free trial.
- Capsule admin accessYou need to open Account Settings › Contact Form in Capsule.
- A text editor and your page's HTMLYou'll open a downloaded file to copy code, then paste HTML into an HTML or code block in your site editor.
Quick setup
For returning users. Each line links to its full step.
- In Capsule, open Account Settings › Contact Form, publish it if needed, then choose ⋯ › Download Form. Step 1
- Open the downloaded file in a text editor and copy the stylesheet line plus everything from <form to </form>. Step 2
- In the SpamKill Console, open Setup Wizard, click No to the WordPress question and paste the code. Step 3
- Click Generate Protected Code, check the email field is EMAIL, then click Yes, protect my form. Step 4
- Copy the protected code, paste it where the form should go, publish the page, then click Next. Step 5
- Submit [email protected] and expect an error, then submit a real enquiry and check Contacts. Step 6
Download your contact form
Where: CapsuleAccount SettingsContact Form
In Capsule, open Account Settings and click Contact Form. Choose your fields, and if the form isn't published yet, click Publish. Then click ⋯ (1) and choose Download Form (2).
You should see: An HTML file of your form in your downloads.
Already using Capsule's Embed code?
That code loads the form in a frame from Capsule, so the Setup Wizard can't protect it. Use the downloaded form instead.
Copy the form code
Open the downloaded file in a text editor, not a browser. Copy the line that starts <link rel="stylesheet", then everything from <form class="capsule-form" down to </form>. Leave out the page's other lines, such as <html> and <head>.
You should see: On your clipboard: the stylesheet line and the form, ending with </form>.
Paste it into the Setup Wizard
Where: SpamKill ConsoleSetup Wizard
In the SpamKill Console, click Setup Wizard in the sidebar. If your site isn't on WordPress, click No under Is your website developed in WordPress?. Paste the code into the box (1).
You should see: Tips under the box, then Please select the email field input showing EMAIL.
Generate the protected code
Where: SpamKill ConsoleSetup Wizard
Click Generate Protected Code. SpamKill asks you to check the email field: it should be EMAIL (1). Click Yes, protect my form (2).
You should see: Replace the existing code with this code on your website, above your protected code.
Put the code on your page
Where: Your website editor
Copy the protected code. Open your contact page in your website editor and paste the code where the form should go, replacing any Capsule embed code. Save and publish the page. Then click Next in the wizard.
You should see: Your page shows Capsule's form fields with Capsule's styling.
Does your site style the form by field name?
SpamKill renames the fields, and the wizard lists the old and new names. Update any CSS or scripts that point at the old names.
Test it twice
Open your page in a private window. Submit the form with [email protected] (1). Then submit it again with your own details. Capsule shows its thank-you page (2), and the enquiry appears under Contacts (3) with a task to check the new lead (4).
The first try shows That email address doesn't look right.
The second try appears under Contacts, with the task check lead created by the web form.
Back in the wizard, click Both Tests Passed.
You should see: Thank you for your submission after the second try.
Your Capsule CRM form is protected
- Bots are stopped before they reach Capsule CRM.
- Real leads arrive exactly as before, with no extra steps for them.
- Every block is logged in your SpamKill dashboard.
Something not working?
Find what you're seeing.
Capsule asks me to tick "I'm not a robot"
That's Capsule's own check, which can appear after a submission from the same place, with or without SpamKill. Tick it to finish your test, or wait a while before testing again.
The form looks unstyled
The stylesheet line from step 2 is missing. Copy the <link rel="stylesheet" line from the downloaded file along with the form, and run it through the wizard again.
A real visitor was told their email doesn't look right
SpamKill checks for missing @ symbols, extra spaces and common typos. The visitor can click Go back to the form, fix the address and send again.
Changed your mind? Undo in under a minute
- Open the page in your website editor.
- Delete the SpamKill code and paste your original Capsule form code back.
- Save and publish the page. Your form is back to how it was.
Thanks! Glad your form is protected.
Sorry about that. Tell us which step tripped you up and we'll fix the guide.
Stuck? We'll set it up with you.
Free setup help for every plan. Send us a message and we'll walk through your Capsule CRM form with you.
Get setup help