Spam Free WordPress comment spam plugin blocks 100% of the automated spam with zero false positives, and with no CAPTCHA.

This plugin was born out of necessity in September of 2007. A comment spam fighting plugin was needed that could handle huge visitor traffic, and huge spam attacks. Today the plugin can scale to handle any amount of comment spam on the highest traffic blogs.
Spam Free WordPress Features
- Automatically blocks 100% of automated comment spam
- Local manual spam and ban policy set with local IP address blocklist
- Significantly reduces database load compared to other spam plugins
- Zero false positives
- Option to strip HTML from comments
- No CAPTCHA
- Saves time and money by eliminating the need to empty the comment spam folder
- Option to automatically delete comments marked as spam, trackbacks/pingbacks, and unapproved.
- Hundreds of thousands of Spam Free Blogs and Counting!
The plugin has the option to generate a custom comment list and comment form for themes that do not work automatically with the plugin.
Comment spam damages a blog’s SEO ranking. This plugin preserves your Search Engine Optimization.
The comment form is secured in the background, so your readers just see your comment form.
Automatically Blocks Automated Comment Spam
Spam Free WordPress several security methods to block spam bots, while allowing real readers to leave a comment without any problem. All security is pass or fail, which means a real person can leave a comment, but a bot cannot. There are no filters to try to guess what is a legitimate comment, ham, or spam.
Local Blocklist
Spam Free WordPress uses an IP address blocklist to block comment spam that is manually submitted by a real person. The blocklist can also be used to ban readers that leave offensive comments. The local blocklist is stored in the database, so it can be used to set policy for a local blog. If someone has their IP address listed in the blocklist that person can still read the blog, but will not be able to leave a comment.
Reduces Database Load
Comments that are blocked are never written to the database, which eliminates all the load on the database that spam creates, and other plugins allow. Blocked comments are sent to an error page that allows the reader to return to their comment, without a loss of data, to try to correct the error. Comments that are blocked have failed security methods that only spam bots would fail.
Option to Strip HTML from Comments
It is very common for manual and automated comment spam to include a URL that links to a web site. Spam Free WordPress has an optional feature that will automatically strip out HTML from comments, so URL links show up as plain text, and will also remove the allowed HTML tags from below the comment text box.
Pingbacks and Trackbacks
The plugin will close pingbacks and trackbacks on all posts and pages automatically when the plugin is installed, and it also has an option to open pingbacks again if so desired.
JetPack Comments
JetPack has introduced a Comments module that takes over the comment form. Spam Free WordPress disables the JetPack Comments module because it doesn’t work with any other plugin that manages the comment form. Spam Free WordPress plays nice with all plugins.
Spam Free WordPress in Action

Comment Form Example
The comment form is secured in the background, so your readers just see your comment form.

Spam protection is invisible to the reader.
Installation Instructions
1. Upload to the /wp-content/plugins directory
2. Activate
3. Turn on the Spam Stats, and try to leave a comment to make sure it is working.
Support
Spam Free WordPress requires a free license key for support, and to activate advanced features, that you can get here.
Requirements
Self-hosted WordPress 3.1 or above. PHP 5 or above. Works with single-site, or multi-site, versions of WordPress.
Download
Download latest version of Spam Free WordPress
Troubleshooting version 1.9.3
Error Messages
Here’s what to do if the plugin displays an error message:
- Error message:
- “Spam Free WordPress disabled the comment form because it could not retrieve the password from the server. It may be necessary to do one, or all, of the following. Turn on the Old Password Fields option, turn off Nonce Security, or to turn on Generate Comment Form.”
- Solution:
- It may be necessary to do one, or all, of the following. Turn on the Old Password Fields option, turn off Nonce Security, or to turn on Generate Comment Form.
- Error message:
- “Spam Free WordPress nonce security check failed. Troubleshooting.”
- Solution:
- Uncheck the box next to Nonce Security.
- Error message:
- “Spam Free WordPress could not retrieve the password from the server. It may be necessary to do one, or all, of the following. Turn on the Old Password Fields option, turn off Nonce Security, or to turn on Generate Comment Form. Troubleshooting.”
- Solution:
- It may be necessary to do one, or all, of the following. Turn on the Old Password Fields option, turn off Nonce Security, or to turn on Generate Comment Form.
- Error message:
- “Comment blocked by Spam Free WordPress because your IP address is in the local blocklist, or you forgot to type a comment.”
- Solution:
- Either your IP address is in the plugin blocklist, which can be found under Settings >> Spam Free WordPress, or you did not type in a comment.
- If All Else Fails
- Switch themes.
- Disable all plugins until the problem plugin is found.
- Request help with the Spam Free WordPress support request form (must have a free license key, and must be logged in to use).
Comment form and Comment List Are Not Styled Properly
- Uncheck the Generate Comment Form box. If you then get an error message when leaving a comment, turn the Generate Comment Form option back on, because your theme isn’t working properly. The Generate Comment Form option that displays the comment list and comment form has a CSS style sheet that can be found in the plugin’s css folder where you can make changes. Be aware however, that css folder will be overwritten on plugin updates.
Plugins That Cause Problems
- Minify plugins such as WP Minify, Better WordPress Minify, W3 Total Cache etc. may need to have minification of JS files turned off, or you can have the plugin exclude the file: sfw-ipwd.js. Some minify plugins, like Better WordPress Minify, require a script handle rather than a filename, so the script handles that should be excluded are: sfw_ipwd. All of the Spam Free WordPress JavaScript files are already minified, or more correctly, compressed.
- Minify plugins can prevent JavaScript files from loading, or from loading properly.
Incompatible Plugins
- Disqus Comment System – Since it takes over your comments completely
- JetPack Comments module – Since it takes over your comments completely
Languages Supported
- English
- German – Deutsch (de_DE)
- Italian – Italian (it_IT)
- French – Français (fr_FR)
- Hebrew – עברית (he_IL)
- Japanese – (日本語 – ja)
- Chinese – 中文 (zh_CN)
- Hong Kong – (香港) (zh_HK)
- Taiwan – (台灣) (zh_TW)
- Swedish – Svenska (sv_SE)
- Norwegian – (norsk)
Free License Key Required
Spam Free WordPress requires a free license key for support, and to activate advanced features, that you can get here.
I’ve been using this plugin for over half a year. It’s been doing great (I got ZERO spam since I installed this) until the update that now forces all users to obtain an activation key to make it work. I did that but surprisingly my comment queue suddenly filled with up to 10 spam comments a day. I’m not sure if it wasn’t working or it failed to identify those comments as spam but I’m not going to get any further support for this. I’m back to using other plugin that I was using before this. Of course that plugin can’t be compared to what Spam Free WordPress used to be but with its current state now I can’t rely on it anymore.
The plugin is fully functional at blocking spam without a license key. The key is only needed for support, and to unlock the advanced features of the plugin.
It sounds like spammers are targeting you with manual spam to get you to turn off Spam Free WordPress. I have a solution for that problem, besides the IP blocklist already built into the plugin, but I haven’t released it yet. (4:52 am on September 14, 2012)
Hi Todd, I’m suddenly getting spam as well (apparently from one source). How do we use the IP blocklist, or is there something else we can do until your new solution is released? Thanks!
Actually, the spam is all coming from one username “Anety” with a site name pinterest.com/anety, but every entry seems to have a different IP address…
Sorry Ben, I only provide support in the support forum. (8:04 pm on September 14, 2012)
I tried to add Spam Free to the cart, but it says the cart is empty. I would like to get the free license key. There is no place to register as a new customer, so I can’t login if that is what I need to do first. Please help.
It finally added the product to the cart when I used the link on this page. Thank goodness.
I’ve used this plugin since a year back or so. Before a code was required to be able to send comments… I that feature removed now?
The plugin does all the security in the background now, so the visitor doesn’t need to do anything. (5:04 am on September 11, 2012)
Great, tnx!
Could you please fix your support forum link?
All I get is a 404!
Thanks.
This link does not work: http://www.toddlahman.com/forums/forum/spam-free-wordpress/
Did you read the 404 message? It says you need to login to your toddlahman.com account to use the forum, and it gives you instructions on how to do that. (12:35 pm on September 10, 2012)
Doh! No, did not read the 404!
My bad, sorry about that!
Do you have a version with documentation in french ? i would like to put it on my site musiqueslibresdedroits.fr thank you !
I don’t have a French version at the moment, but it would be nice to have someone translate into French with POEDIT. (2:52 am on September 6, 2012)
Hello
Seems that I cannot register for a Free License Key. ¿How could I get one?
Thanks
OK I did it.
Thanks again.
Allo, I’ve already donated, but I wanted to stop by and say this is without a doubt the best anti-spam comment plugin I’ve ever used. I dunno what secret sauce you have, but it’s so great to go back to working on content and not have to worry about defending against spammy comments. Thank you, thank you, thank you.
Please grab a free license key: http://www.toddlahman.com/shop/spam-free-wordpress/
Then use the support forum: http://www.toddlahman.com/forums/forum/spam-free-wordpress/ (4:15 am on September 4, 2012)
How do I get the Free License Key?
http://www.toddlahman.com/shop/spam-free-wordpress/. (4:15 am on September 4, 2012)
Error notice with 3.4
Notice: get_current_theme is not supported from 3.4! Use wp_get_theme(). in /var/www/projects/zdrojak/htdocs/public/wp-includes/functions.php on line 2628
This is fixed in 1.8.4 that will be released hopefully today. (12:51 pm on September 3, 2012)
I was testing it on a German WordPress installation. Unfortunately all text regarding WordPress comments are displayed in English when this plugin is enabled. (e.g. “Comments on…” instead of “Kommentare zu….”) Where can I change the language?
Got my free license key with this last plugin update. Now I am having the problem I did previously when comment error message comes up when sending comment. In one of your previous plugin updates, it was corrected when you told me to go to settings and check the box allowing older version of wordpress javascript , I think that was what it was (I can not remember exactly what the setting was now). Of course the numerous setting options are no longer visible on this last update so how can I get this resolved? I really like your plugin and know your plugin is free but I am getting frustrated with having a problem with sending comments after an update. Thank you for your assistance.
Hi Jennifer,
I sent you an email. Your free license key activates the advanced options in the plugin. (9:58 am on September 1, 2012)
Sent you info on theme. Not sure if that is problem because when I try to send a comment, message comes up that password is not found or authenticated. When I look at settings of plugin, there are none of the previous settings that I could turn on and off before the last update.
Also, the link you provided for the support forum generates a 404 error
If you aren’t logged into the blog then you will see a 404 page when trying to view the support forum. (4:33 pm on August 31, 2012)
I have a license key and tested the comment form with a url and it did not get blocked. I’ve checked all relevant boxes in the settings area.
Please help. I have three sites and all of them are now exposed again to spam
I left a test comment link using HTML on your blog at http://truenorthalliance.com/blog/bonsai-learning/, and the HTML was disabled properly by the plugin.
The plugin does not block comments with HTML, it simply disables the HTML from working when a comment is viewed. For example, when you tested the link in a comment you may have noticed you can’t click it like a link, because it is rendered as plain text, exactly as the tooltip bubble explains next to the option. Hold your mouse over the question mark, and you’ll see the explanation.
There is no reason to block a legitimate comment that uses HTML, when the plugin will render the HTML useless while allowing the comment through.
The checkboxes not remaining checked isn’t something I’ve seen, nor has it been reported by anyone else. The checkboxes are rendered using the Settings API which I have not direct control over. It sounds like saving the checked box works the second time, so at least it’s a quirk that isn’t fatal.
I got your messages on toddlahman.com, and saw that you tried to reset your password. I added a login box, and a link to reset your password on toddlahman.com, to make it easier to use the support forum if you log out, or forget your password. Knowing you were having these issues are the reason I replied here, rather than referring you to http://www.toddlahman.com/forums/forum/spam-free-wordpress/
Check your Junk E-Mail or Spam folder for your password reset.
To summarize, the plugin is working exactly as it was designed.
I hope you will give the plugin a better rating than 1 now that you understand how it is working. (4:32 pm on August 31, 2012)
Hi Todd,
I am using custom theme for my blog. I have installed Spam Free WordPress . I did everything you mentioned in your forums. I changed code in comments.php but nothing is working. When I am logged in to my word-press account i can post comments. But when I logged out and try to test comment I get an error “Spam Free WordPress rejected your comment because you did not enter the correct password or it was empty.” Please give me some idea how to fix this issue. Here is my comments.php http://pastebin.com/b98h9dFk
Please give me soem idea about how to fix this. I have been trying this last week. Thanks !
Support is only provided in the support forum:
http://www.toddlahman.com/forums/forum/spam-free-wordpress/ (11:43 am on August 31, 2012)
Thanks, Todd, I got the key this time. (Still no sign of it having arrived the first two times.) Sorry to have misused the comments page, I’m still learning my way around the site. Cheers.
Hi Todd – I bought you a cup of coffee before I’d try to install my Spam Free WordPress… but I cannot install it. I have not received my License Key, even though I went to the “Lost License Key” page TWICE and asked to have it sent to me. I have no spam filter on my gmail account (that I am aware of), so it can’t be that it’s being derailed to my spam folder. What’s up? How do I get the license key? Thanks!
Nicole
I emailed your license key again. It has been emailed. In Gmail the email could have ended up in the Junk Email or Spam folder. Hunt around your folders, you’ll find the email.
Also keep in mind you now have a toddlahman.com account, so you can use the support forum for Spam Free WordPress rather than the comments. (9:02 pm on August 30, 2012)