Configuring Form Builder

All settings live under Stores → Configuration → Hyvä Commerce → Form Builder.

Security Settings

Found under Hyvä Commerce → Form Builder → Security:

Setting	What it does
Google reCAPTCHA Type	Picks the reCAPTCHA type used by forms whose CAPTCHA Mode is set to "Google reCAPTCHA". Mirrors "Enable for Hyvä CMS Forms" in Magento's reCAPTCHA storefront panel (both edit the same value), and the site keys come from the type-specific sections there.
Honeypot Secret	The secret used to derive each form's hidden honeypot field name. Auto-generated on install; override it only to rotate the secret. Clearing it disables the honeypot.

Webhook Delivery Settings

Found under Hyvä Commerce → Form Builder → Webhook Delivery:

These are safeguards for mirroring a submission to a form's webhook URL. The webhook fires after the visitor's response is sent, so they protect the server, not the submitter.

Setting	What it does
Max Concurrent Dispatches	How many webhook requests may run at once across the server. Submissions beyond the cap skip the webhook; the submission and its email still succeed. Set to 0 to disable the cap. Default: 10.
Connect Timeout (seconds)	How long to wait for the endpoint to accept the connection before giving up. Default: 2.
Total Timeout (seconds)	Maximum time for the whole webhook request. Default: 5.