Skip to main content
Flex Forms doesn’t just collect data; it protects it. The Access Gates system provides enterprise-grade security controls directly in your Form Settings. Every gate is enforced at the server level. Even if a malicious user tries to bypass your website’s frontend, the Flex Forms engine will slam the door shut.

​
Security gates

You can layer these gates together to create highly specific scenarios (e.g., “Only allow 50 entries, and only on weekends, and only if they have the password”).
1

Password Protection

Lock your form behind a cryptographic key. Perfect for internal HR surveys or VIP event registrations. The plaintext password is never exposed to the internet.
2

Automated Scheduling

Don’t stay up until midnight to launch a campaign. Define an exact Start Date, End Date, and Timezone. You can even uncheck Saturdays and Sundays to ensure your B2B forms only collect leads during office hours.
3

Entry Caps (Scarcity)

Selling 100 limited-edition products? Set a strict maximum entry cap. The exact millisecond the 100th person submits, the form locks down globally. You can cap total entries, or limit velocity (e.g., 10 entries per day).
4

Duplicate Prevention

Running a democratic vote or a giveaway? Prevent users from submitting multiple times by locking the form to their IP Address, or more accurately, to their Email Address. Prefer email when accuracy matters. Behind a CDN or load balancer, configure trusted proxies so visitor IPs are real — private/proxy ranges are ignored for IP locks so one submit cannot block everyone.
5

Manual Override (The Kill Switch)

If a campaign goes viral and you are overwhelmed with leads, simply flip the Close Form switch to instantly halt all new traffic.
6

CAPTCHA (one provider)

After connecting reCAPTCHA and/or Turnstile under left-rail Integrations, enable CAPTCHA in Form Settings → Access and pick a single provider for that form. Details: Access settings.

​
The Respondent Experience

When a user hits a gate, they don’t see a scary error page. Instead, they see a beautifully branded, customizable message that you control.

Tailored Messaging

Customize exactly what respondents see when they arrive too early (“Coming Soon!”), too late (“Campaign Ended”), or when capacity is reached (“Sold Out!”).

Seamless Redirects

Alternatively, if a user hits a gate (or successfully completes the form), you can automatically redirect them back to your main website or a specific landing page.
Entry-cap concurrency: When an entry cap is enabled, Flex Forms takes a short exclusive database lock on the form row only for the final count check + insert. File promotion and other disk work happen outside that lock so high traffic does not serialize every submitter. Forms without a cap never take this lock. Optional Redis powers Insights scaling (uniques / today buffers), not entry-cap authority.
Last modified on September 7, 2026