Encryption Key

The Email Form encrypts the settings of the form (including the email template) with the Encryption service of ExpressionEngine, so a visitor cannot change them. That only works with a secret encryption_key.

ExpressionEngine sets an encryption_key in config.php during the installation. If your site has no key, set your own key in your config file, see the ExpressionEngine docs.

WARNING

From v6.0.0 the form is not rendered when there is no secret encryption_key, and an error is logged. Super Admins see a message instead of the form.

When you change the key, forms that were rendered before (e.g. from a page cache) can no longer be submitted: clear your page cache.

Example

$config['encryption_key'] = 'sy22k6QK6JzH38u4nLZ65bHOdK6VL89d';