Currently, Honeypot protection can be enabled for a Webform by checking "Protect [FORMNAME] webform with Honeypot" under the Webform’s Third party settings. However, this requires manual configuration for each Webform.
This adds friction for site builders and editors—especially non-technical users—who may not be aware of the need for Honeypot protection or may forget to configure it. As a result, Webforms can be left unprotected.
A global setting would ensure consistent protection without additional training or manual steps, and so that admins don't have to remember to add it individually.
When the Webform module is enabled, add a global checkbox to the Honeypot settings page:
"Protect all Webforms with Honeypot"
protect_all_webforms) is enabled, Honeypot protection applies to every Webform automatically.Active
2.2
Code
The form-specific "Protect [FORMNAME] webform with Honeypot" feature is provided by the Webform module, so we'll need a follow-up created in the Webform module issue queue to respect the value of the honeypot module's global setting, and disable the per-form option accordingly.