Managing WordPress Comment Spam with Akismet and Other Methods
Anyone who has run a WordPress site for a while has encountered the relentless flood of comment spam — links to online stores, product advertisements, and inappropriate content. Spam doesn't just hurt your site's appearance; it damages SEO and slows down your website.
Table of Contents
- What Is WordPress Comment Spam?
- How Comment Spam Damages Your Website
- Installing and Using Akismet
- Optimizing Akismet Settings
- Other Recommended Anti-Spam Plugins
- Using CAPTCHA / reCAPTCHA
- The Honeypot Technique
- WordPress Discussion Settings to Reduce Spam
- Comparison of Methods
- Frequently Asked Questions (FAQ)
- Summary
What Is WordPress Comment Spam?
Comment spam is comments submitted by bots or humans with hidden intentions — building low-quality backlinks, advertising products, or spreading malware. Most spam comes from spambots that automatically scan for WordPress sites and submit comments.
Common types of comment spam:
- Link spam — links pointing to online stores or malicious websites
- Generic praise spam — vague compliments like "Great post! Very informative." with a link
- Keyword stuffing spam — SEO keywords embedded in the commenter's name
- Phishing spam — tricking users into clicking links to steal information
- Adult/malware spam — inappropriate content or malware links
How Comment Spam Damages Your Website
Many site owners underestimate comment spam, but it causes significant harm:
- SEO damage — Google may view your site as low quality if spammy links appear in comments
- Database bloat — thousands of spam comments make MySQL larger and slow your site
- Time waste — manually deleting spam every day takes valuable time
- Poor user experience — real readers see spam and lose confidence in your site
- Server load — spambots send repeated requests that consume server resources
Installing and Using Akismet
Akismet is the anti-spam plugin that comes bundled with every WordPress installation, developed by Automattic (the company behind WordPress.com). It uses AI and machine learning to analyze comments in real-time.
How to Activate Akismet
- Go to Plugins → Installed Plugins, find Akismet, and click Activate
- Click Set up your Akismet account
- Create a WordPress.com account (free) or log in if you already have one
- Choose a plan: Personal (free) for personal blogs, or Plus/Enterprise for commercial sites
- Copy your API Key and paste it into WordPress → Akismet Settings
Optimizing Akismet Settings
After activation, go to Settings → Akismet Anti-Spam to configure:
- Silently discard the worst and most pervasive spam — enable to automatically discard the most obvious spam without adding to the spam queue
- Show the number of approved comments — displays the commenter's approved comment count to build credibility
- Privacy notice — enable to inform visitors that their data is checked for spam compliance
How to Review the Spam Queue
Go to Comments → Spam to view comments flagged by Akismet. Check regularly to:
- Rescue false positives (legitimate comments flagged as spam)
- Click "Empty Spam" to clear comments older than 30 days
Other Recommended Anti-Spam Plugins
Beyond Akismet, several excellent plugins are available:
| Plugin | Strengths | Price | Best For |
|---|---|---|---|
| Akismet | AI real-time analysis | Free (personal) | All sizes |
| Antispam Bee | No data sent out, GDPR-friendly | Free | Privacy-conscious sites |
| WP Armour | Lightweight honeypot only | Free | Low-traffic sites |
| CleanTalk | No CAPTCHA, cloud-based | $12/year | High-traffic sites |
| Titan Anti-Spam | Firewall + anti-spam combo | Free/Pro | Sites needing all-in-one |
Antispam Bee — Best for GDPR Compliance
Antispam Bee operates without sending any personal data to external servers. It checks comments through multiple local methods, making it ideal for websites requiring full GDPR compliance.
Using CAPTCHA / reCAPTCHA
CAPTCHA verifies that comment submitters are human, not bots. There are several types:
Google reCAPTCHA v2 / v3
- v2 — shows an "I'm not a robot" checkbox or image selection challenge
- v3 — runs silently in the background, assigning a risk score from 0-1
Recommended plugins: WPForms, Advanced Google reCAPTCHA, Login No Captcha reCAPTCHA
Cloudflare Turnstile
An alternative to reCAPTCHA that does not track users. Free to use and ideal for sites already using Cloudflare.
The Honeypot Technique
A Honeypot is a hidden input field in the comment form. Real users cannot see it and will not fill it in. Bots automatically complete all fields, so when this hidden field is filled, the system identifies a bot and rejects the comment.
Advantages of Honeypot:
- Completely invisible — zero impact on user experience
- No reliance on third-party services
- Lightweight — minimal server resource usage
Recommended Honeypot plugins: WP Armour – Honeypot Anti Spam, WPForms (has Honeypot built-in)
WordPress Discussion Settings to Reduce Spam
WordPress has built-in features that reduce spam without additional plugins. Go to Settings → Discussion.
Key Settings
- Comment must be manually approved — every comment requires approval; guarantees no spam appears but takes time
- Comment author must have a previously approved comment — approved commenters get automatic approval on subsequent comments
- Hold a comment in the queue if it contains X or more links — set to 1-2 links to flag suspicious comments
- Disallow Comment Keys — add words or URLs to automatically trash
- Comment Moderation — keywords that place comments in the moderation queue
Close Comments on Old Posts
Old posts are prime targets for spambots, which do not care about content recency. Automatically close comments after a set number of days:
Settings → Discussion → "Automatically close comments on posts older than X days" — set to 180-365 days as appropriate.
Comparison of Methods
| Method | Effectiveness | UX Impact | Cost | Difficulty |
|---|---|---|---|---|
| Akismet | ⭐⭐⭐⭐⭐ | Good | Free/Paid | Easy |
| Antispam Bee | ⭐⭐⭐⭐ | Excellent | Free | Easy |
| reCAPTCHA v3 | ⭐⭐⭐⭐ | Excellent | Free | Medium |
| Honeypot | ⭐⭐⭐ | Best | Free | Easy |
| Manual Approval | ⭐⭐⭐⭐⭐ | No impact | Free | Easy (but time-consuming) |
| Disable Comments | ⭐⭐⭐⭐⭐ | No spam | Free | Easiest |
Frequently Asked Questions (FAQ)
Is Akismet free or paid?
Akismet is free for personal blogs and non-commercial websites. For commercial sites, plans start at $10/month or $100/year. If your site earns revenue through advertising or sales, a paid plan is required.
What is the difference between Akismet and Antispam Bee?
Akismet sends comment data to Automattic's servers for AI analysis — extremely powerful, but with privacy implications. Antispam Bee works entirely locally without sending data externally, ideal for websites requiring full GDPR compliance.
Can I disable comments entirely on WordPress?
Yes. Go to Settings → Discussion and uncheck "Allow people to submit comments on new posts" to disable for all new posts. You can also disable comments on individual posts via Quick Edit in the post list.
Does comment spam affect SEO?
Yes. If spam comments containing low-quality links are approved and displayed, Google may consider your site low quality. Spammy outbound links in approved comments can negatively impact your domain's reputation in Google's eyes.
Do I need multiple anti-spam plugins at once?
No. One good plugin like Akismet is sufficient for most sites. You may add a lightweight Honeypot plugin as a complement since it adds minimal overhead, but running multiple heavy anti-spam plugins simultaneously can slow your site and cause plugin conflicts.
What is a Honeypot and how does it work?
A Honeypot is a hidden input field in the comment form, invisible to human users. Bots automatically fill all fields they find, so when this hidden field contains data, the system identifies the submitter as a bot and rejects the comment without showing any error to the user.
Summary — Best Practices for WordPress Comment Spam
For most websites, using Akismet with solid Discussion settings handles 95%+ of spam automatically:
- ✅ Activate Akismet (bundled with every WordPress install)
- ✅ Configure WordPress to hold comments with links for moderation
- ✅ Close comments on old posts (Settings → Discussion)
- ✅ Add a Honeypot plugin for extra protection with zero UX impact
- ✅ GDPR-sensitive sites should use Antispam Bee instead of Akismet
Running WordPress on a high-performance server helps handle spambot traffic more efficiently. AsiaGB Hosting provides SSD storage with 99% Uptime, backed by twice-monthly automated backups — ideal for WordPress sites of all sizes.