Reporting · Admin Area

Spam and Anti-bot Protection

Configure CAPTCHAs, IP address limits, and other anti-spam measures.

reCAPTCHA

reCAPTCHA helps prevent credential stuffing. Only reCAPTCHA v2 is supported:

Enable reCAPTCHA

Helps prevent bots from creating accounts. How do I configure it?

Enable reCAPTCHA for login.

Helps prevent bots from brute-force attacks.

reCAPTCHA site key

Generate site and private keys at http://www.google.com/recaptcha

reCAPTCHA private key

Invisible Captcha

Invisible Captcha helps prevent the creation of spam accounts. It adds a honeypot field and time-sensitive form submission to the account signup form. Read their documentation.

Enable Invisible Captcha during sign up

Helps prevent bots from creating accounts.

Akismet

Akismet helps prevent the creation of spam issues in public projects. How do I configure Akismet?

Enable Akismet

Helps prevent bots from creating issues.

Akismet API Key

Generate API key at http://www.akismet.com

IP address restrictions

Limit sign in from multiple IP addresses

Helps prevent malicious users hide their activity.

IP addresses per user

Maximum number of unique IP addresses per user.

IP address expiration time

How many seconds an IP counts toward the IP address limit.

Spam Check

Enable Spam Check via external API endpoint

Define custom rules for what constitutes spam, independent of Akismet

URL of the external Spam Check endpoint

Spam Check API key

The API key used by GitLab for accessing the Spam Check service endpoint.

Abuse reports

Receive notification of abuse reports by email. Learn more.

Anyone can register for an account.