[GH-ISSUE #6992] Spam Bot Protection #117872

New Issue

GiteaMirror · 2026-05-20T19:24:57-05:00

GiteaMirror commented

2026-05-20 19:24:57 -05:00

Originally created by @vosiander on GitHub (Nov 17, 2024).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/6992

Feature Request

Is your feature request related to a problem? Please describe.
We see an influx of unwanted spam bot user registrations which try to exploit unsafe configurations
Currently, there is no adequate protection against spam bots during the registration process, leading to an influx of spam accounts. Additionally, there is no easy way for administrators to block specific email domains or manage email whitelists and blacklists effectively. This results in frustration when trying to maintain a secure and spam-free user base.

Describe the solution you'd like

Implement spam bot protection mechanisms during registration, such as captchas or similar tools, to prevent automated account creation.
Add admin functionality to block or restrict unwanted email domains with ease.
Introduce options to maintain white and blacklists for email addresses, allowing for granular control over the registration process.
Do not rely on first user creation equals admin. This should be provided via inital configuration/env-variables

Describe alternatives you've considered

Manually filtering and removing spam accounts, which is time-consuming and inefficient.
Using third-party email validation tools, which might not integrate seamlessly with the current system.

Additional context
Spam bot protection would significantly enhance the registration process's security and user experience. An admin-friendly interface for managing email restrictions will streamline the workflow for administrators, making it easier to combat spam. If needed, I can provide mockups or further details about the proposed features.

Originally created by @vosiander on GitHub (Nov 17, 2024). Original GitHub issue: https://github.com/open-webui/open-webui/issues/6992 # Feature Request **Is your feature request related to a problem? Please describe.** We see an influx of unwanted spam bot user registrations which try to exploit unsafe configurations Currently, there is no adequate protection against spam bots during the registration process, leading to an influx of spam accounts. Additionally, there is no easy way for administrators to block specific email domains or manage email whitelists and blacklists effectively. This results in frustration when trying to maintain a secure and spam-free user base. **Describe the solution you'd like** 1. Implement spam bot protection mechanisms during registration, such as captchas or similar tools, to prevent automated account creation. 2. Add admin functionality to block or restrict unwanted email domains with ease. 3. Introduce options to maintain white and blacklists for email addresses, allowing for granular control over the registration process. 4. Do not rely on first user creation equals admin. This should be provided via inital configuration/env-variables **Describe alternatives you've considered** - Manually filtering and removing spam accounts, which is time-consuming and inefficient. - Using third-party email validation tools, which might not integrate seamlessly with the current system. **Additional context** Spam bot protection would significantly enhance the registration process's security and user experience. An admin-friendly interface for managing email restrictions will streamline the workflow for administrators, making it easier to combat spam. If needed, I can provide mockups or further details about the proposed features.

GiteaMirror closed this issue

2026-05-20 19:25:00 -05:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/open-webui#117872