Is there a way to disable email-only signup? I would like to set up so that signup can only be via GitHub, Twitter or Discord. I have a user who is using VPNs to repeatedly log in and troll or post 4h1t content. With posts like these, lol: [This image is a post asking if mixing bleach with ammonia is safe. (Captioned by AI)] Also open to alternative approaches, plugins or solutions. Thanks!

[image] supermathie: I know people have had a lot of success using the anti-spam AI module? I would like to second this, it is free (using Gemini for example) and you could have custom instructions that block even if the troll becomes more sophisticated. The trolls experience would be quite bad as well, cause they would get block right away and only you would see the spam in your queue which you can easily delete.

[image] haydenjames: disable email only signup You can disable email-only login (site setting: enable_local_logins) but I don’t think you can disable only local signups. [image]

[image] supermathie: enable_local_logins Thanks. Sounds like this may lock out at least some existing members? And login security or user moderation plugins available that can help with this?

I know people have had a lot of success using the anti-spam AI module?

What if you hid the email signup fields and replaced them with them pointing them to login with OAuth providers?

There is the fingerprinting option not sure if that would work for you: [image] Discourse Fingerprint - Browser Fingerprinting Plugin Plugin Discourse Fingerprint paw_prints Discourse Fingerprint comes as a tool to community managers in their combat with internet trolls. troll It works by computing a unique identifier (a fingerprint) of each registered user, by taking into consideration over 20 browser characteristics such as user agent, screen resolution, timezone, device memory, etc. When each of these browser characteristics are considered separately, they are not enough to assess whether two users are the same. There is a re… If you’ve already banned their I.P. and e-mail vpn wouldn’t make any difference if they use the same e-mail, but guess they are using different e-mails and I.P.s then so ban isn’t working. Don’t know what “4h1t” means, that is a strange post there Ammonia and Bleach are definitely not safe to be mixed that generates toxic gasses.

[image] haydenjames: It’s not officially Can you expand on the question here? I am not following, are you saying Gemini is not officially supported?

I think I misunderstood. Please ignore my ignorance. :laughing: So to make use of this I need to install this plugin: Discourse AI Then, follow this guide?: Discourse AI - Spam detection Let me know if I understand correctly.

Filtering spam/troll accounts

Product Support

haydenjames (Hayden James) April 10, 2025, 5:06pm 9

Ok I may give this a try. It’s not officially supported though. Safe to use in production?

Topic		Replies	Views
How to prevent registration spam Product Support	27	4659	March 17, 2025
Auto-activate new users Product Support	25	5009	September 21, 2020
Remove signup by email and force only GitHub signup Product Support	1	463	July 3, 2023
Disabling email verification Product Support	4	2515	September 8, 2020
Anyway to only allow new user from social login? Product Support	2	621	April 22, 2020

Filtering spam/troll accounts

Related topics