Encryption Key

The Email Form encrypts the settings of the form (including the email template) with the Encryption service of ExpressionEngine, so a visitor cannot change them. That only works with a secret encryption_key.

ExpressionEngine 6 and later set an encryption_key in config.php during the installation. If your site has no key, set your own key in your config file, see the ExpressionEngine docs.

WARNING

From v5.7.0 the form is not rendered when there is no encryption_key, and an error is logged. Super Admins see a message instead of the form. Older versions fell back to a key that is not secret, which allowed a visitor to change the recipient and the email template.

Example

$config['encryption_key'] = 'sy22k6QK6JzH38u4nLZ65bHOdK6VL89d';