Humanmark for Discourse - Hardware-Backed Humanity Verification

Customization Plugin
1
:information_source: Summary Know what’s human in your Discourse forum - hardware-backed verification to distinguish human intent from automation
:hammer_and_wrench: Repository Link https://github.com/humanmark/discourse-humanmark
:open_book: Install Guide How to install plugins in Discourse

verification-flow

Features

Know What’s Human - Distinguish human intent from automation:

  • Verify human presence before creating posts, topics, or private messages
  • Hardware-backed verification using secure device authentication (fingerprint/face recognition, device passcode)
  • No puzzles or behavioral tracking
  • Support for anonymous users and Discourse’s anonymous mode

Smart Bypass Rules - Balance security with user experience:

  • Skip verification for staff members and trusted users
  • Set trust level thresholds for automatic bypass
  • Configure reverification periods per content type (posts/topics/messages)
  • Maintain smooth experience for established community members

Privacy-First:

  • Zero data retention - completely stateless verification
  • No accounts or personal information required
  • Instant verification takes just seconds

Advanced Integration:

  • Comprehensive rate limiting (per-user and per-IP)
  • Four admin reports for monitoring verification metrics
  • Event-driven architecture
  • Dynamic enabling/disabling without server restart

Configuration

  1. Get your API credentials:

    • Visit humanmark.dev to learn more
    • Contact sales@humanmark.io for beta access
    • We’re looking for select Discourse communities to participate in our beta program

  2. Install the plugin:

    # In your app.yml
hooks:
  after_code:
    - exec:
        cd: $home/plugins
        cmd:
          - git clone https://github.com/humanmark/discourse-humanmark

    Then rebuild: ./launcher rebuild app

  3. Configure in Admin Panel:

    • Navigate to Admin → Settings → Plugins → Humanmark
    • Enter your API credentials and domain
    • Choose which actions require verification (posts, topics, messages)
    • Set bypass rules for staff and trust levels
    • Enable the plugin (takes effect immediately, no restart needed)

  4. Monitor with Admin Reports:

    • Navigate to Admin → Reports
    • Search for “humanmark” to see verification metrics
    • Track activity, success rates, bypasses, and rate limits

Settings

Name Description
API Configuration
humanmark_enabled Master on/off switch for the plugin
humanmark_api_key Your public API key from Humanmark dashboard
humanmark_api_secret Your private API secret (keep secure!)
humanmark_domain Verification domain (must be allowlisted in your Humanmark account)
Protection Settings
humanmark_protect_posts Require verification for post creation
humanmark_protect_topics Require verification for new topics
humanmark_protect_messages Require verification for private messages
Bypass Settings
humanmark_bypass_staff Staff members skip verification
humanmark_bypass_trust_level Minimum trust level to bypass (0-5, use 5 for no bypass)
Rate Limiting
humanmark_max_challenges_per_user_per_minute Per-user minute limit (1-20, default: 3)
humanmark_max_challenges_per_user_per_hour Per-user hourly limit (1-100, default: 15)
humanmark_max_challenges_per_ip_per_minute Per-IP minute limit (1-50, default: 10)
humanmark_max_challenges_per_ip_per_hour Per-IP hourly limit (1-500, default: 50)
Reverification Periods
humanmark_reverify_period_posts Minutes before re-verification needed for posts (0-10080, default: 30)
humanmark_reverify_period_topics Minutes before re-verification needed for topics (0-10080, default: 0)
humanmark_reverify_period_messages Minutes before re-verification needed for messages (0-10080, default: 60)
Other Settings
humanmark_theme Widget appearance (light/dark/auto)
humanmark_flow_retention_days Days to keep verification records (1-365, default: 30)
humanmark_debug_mode Log sensitive debug information (default: false)

Note: Currently in beta - select Discourse communities receive an increased allotment of verifications in the free tier. See humanmark.dev/pricing for pricing details.

8 Likes
4

This is interesting. I have a question, will this prevent banned users from re-joining the community? For example:

  1. Notorious troublemaker, keeps signing up
  2. Joins again, passes Humanmark
  3. Gets banned
  4. Joins again
  5. Using the same hardware, will he or will he not pass the verification under a new account?

Is theree a demo we can see somewhere?

5

Ah nevermind, I understand now. No data retention so I guess no way to solve my problem :smiley:

6

Sorry to derail, Eric.

Dave, have you tried banning their IP?