forms.app
Drag-and-drop contact layout, embed on any page, honeypot and reCAPTCHA options, email notifications, and unlimited submissions on the free plan.
// contact forms
Best HTML contact form builders for business sites
A contact form is still the highest-intent conversion path on most business websites. These HTML contact form builders let you ship one without PHP, Node, or an inbox exposed in plain text.
Recommended HTML contact form builders
Formspree
Own your markup completely. Ideal for developer portfolios and documentation sites with a minimal contact block.
Basin
When contact forms need résumés, screenshots, or brief attachments — Basin handles multipart POST from your HTML.
Jotform
Pre-built contact templates and embed code. Watch the 100 submission/month free cap on busy landing pages.
Essential contact form fields
Keep HTML contact forms short. Every extra required field costs completions.
- Name — single field or split first/last only if your CRM requires it
- Email — use
type="email"andautocomplete="email" - Message — textarea with a reasonable
maxlength - Subject (optional) — dropdown to route sales vs support
- Phone (optional) — skip unless you call leads back
Minimal accessible contact form
<form action="https://formspree.io/f/xyz" method="POST">
<label>Your name
<input name="name" required autocomplete="name" />
</label>
<label>Email
<input type="email" name="email" required autocomplete="email" />
</label>
<label>How can we help?
<textarea name="message" required rows="5"></textarea>
</label>
<button type="submit">Send message</button>
</form>Spam protection for HTML contact forms
Public contact endpoints attract bots. Layer these defenses:
- Honeypot fields — hidden inputs humans never fill; supported by Formspree, Basin, forms.app
- reCAPTCHA / hCaptcha — forms.app and Jotform include toggles in the builder UI
- Rate limiting — hosted backends throttle abusive IPs automatically
- Never expose a raw mailto: — scrapers harvest visible addresses; use a form backend instead
Deliverability checklist
Submissions are useless if they land in spam. Verify notification email domains, add SPF/DKIM for custom sender addresses when your provider allows it, and test from a real device before launch.
Embed vs custom HTML? Custom HTML wins on brand match and page weight. Embeds win when you need conditional logic ("I am a customer" → show order ID) without writing JavaScript.