A Hidden Field submits a value without displaying a visible input control. It is useful for a non-sensitive value that your form needs to include with a submission, but it must not be used to protect secrets or information that visitors should not be able to change.
Configure a hidden field
- Add Hidden Field from the field picker.
- Select it to open its Settings controls.
- Set Field Name / ID to a meaningful identifier, such as
campaign_source. - Enter the value to submit in Default Value.
- Save the form and submit a test entry to verify that the expected value is included.
Important security and validation notes
- Do not store secrets: hidden inputs are present in page markup and can be inspected or changed by visitors. Never place passwords, API keys, private tokens, or trusted authorization values in them.
- Do not trust visitor-controlled values: treat a hidden-field value as untrusted input, even if you set a default value in the editor.
- Provide a non-empty value: the current Hidden Field implementation rejects an empty submitted value during validation, even though the field settings do not expose a separate required toggle. Set a non-empty default value and test the actual submission flow.
- Verify the stored entry: submit a test and check the saved entry to confirm the field name and value are what you expect.
Hidden fields are not a replacement for server-side validation or trusted server-side attribution. If you need a value to be authoritative, derive or verify it on the server rather than trusting the value sent by the browser.
Screenshot to add: Hidden Field settings showing Field Name / ID and Default Value