Add functionality and customize your Drupal application with thousands of projects contributed by our amazing community.
A module is code that extends Drupal's by altering existing functionality or adding new features. You can use modules contributed by others or create your own. Learn more about creating and using Drupal modules.
CAPTCHA
Add challenge-response tests to user-facing forms on your site to protect against spambot submissions. Other CAPTCHA types are supported via additional modules. A CAPTCHA is a challenge-response...
Categories: Access control, Security
reCAPTCHA
Uses the Google reCAPTCHA web service to improve the CAPTCHA system. It is tough on bots and easy on humans. reCAPTCHA is built for security. Armed with state of the art technology, it always stays...
Categories: Integrations, Security
Honeypot
Honeypot uses both the honeypot and timestamp methods of deterring spam bots from completing forms on your Drupal site (read more here). These methods are effective against many spam bots, and are...
Categories: Content editing experience, Security
SMTP Authentication Support
This module allows Drupal to bypass the PHP mail() function and send email directly to an SMTP server. The module supports SMTP authentication and can even connect to servers using SSL if supported...
Categories: Automation, Integrations, Security
Security Kit
SecKit provides Drupal with various security-hardening options. This lets your mitigate the risks of exploitation of different web application vulnerabilities. Cross-site Scripting Content Security...
Categories: Security
Key
Key provides the ability to improve Drupal security by managing sensitive keys (such as API and encryption keys). It gives site administrators the ability to define how and where keys are stored,...
Categories: Security
External Links
External Links is a small module used to differentiate between internal and external links. It will find all external links on a page and add an external icon indicating it will take you offsite or...
Categories: Content display, Security
Antibot
What is Antibot? Antibot is an extremely lightweight module designed to eliminate robotic form submissions on your website in an innovative-fashion. The module works completely behind the scenes...
Categories: Security
Password Policy
This module supports enforcing restrictions on user passwords by defining password policies. Overview A password policy can be defined with a set of constraints which must be met before a user...
Categories: Access control, Security
Role Delegation
This module allows site administrators to grant specific roles the authority to assign selected roles to users, without them needing the administer permissions permission. For each role, Role...
Categories: Access control, Security
Menu Admin per Menu
By default, Drupal allows only users with the Administer menus and menu items permission to add, modify or delete menu items. Menu Admin per Menu allows to give roles per menu admin permissions...
Categories: Administration tools, Access control, Security
reCAPTCHA v3
Google reCAPTCHA v3 Module provides a streamlined and secure solution for integrating Google reCAPTCHA v3 and fallback challenges into your Drupal site. This module enhances security without adding...
Categories: Access control, Integrations, Security
Automated Logout
This module provides a site administrator the ability to log users out after a specified time of inactivity. It is highly customisable and includes "site policies" by role to enforce logout. Try it...
Categories: Security
Encrypt
Encrypt is a Drupal module that provides an application programming interface (API) for performing symmetric or asymmetric encryption. It allows integrating modules to encrypt and decrypt data in a...
Categories: Developer tools, Security
Flood control
Drupal's built-in flood protection blocks login attempts after repeated failures – but provides no interface to configure limits or unblock affected users. Flood Control fills that gap with an...
Categories: Administration tools, Developer tools, Security
Real AES
Overview Real AES provides an encryption method plugin for the Encrypt module. This plugin offers AES encryption using CBC mode and HMAC authentication through the Defuse PHP-Encryption library....
Categories: Security
Content-Security-Policy
The Content-Security-Policy header allows your Drupal site to inform browsers of trusted sources for JavaScript, CSS, and other external resources. This adds a security layer to detect and mitigate...
Categories: Integrations, Security
Administer Users by Role
This module allows site builders to set up fine-grained permissions for allowing "sub-admin" users to manage other users based on the target user\'s role. The module defines new permissions to...
Categories: Access control, Administration tools, Security
Username Enumeration Prevention
Username Enumeration Prevention is a project which aims to mitigate common ways of anonymous users identifying valid usernames on a Drupal 8+ site. What Is Username Enumeration? Username...
Categories: Access control, Security
Login Security
Login Security module improves the security options in the login operation of a Drupal site. By default, Drupal introduces only basic access control denying IP access to the full content of the...
Categories: Security
Field Validation
This module provides a collection of configurable validation rules for your field instances. Available validators 7.x 8.x Color (HTML5) ✓ (*) Date range ✓ ✓ Date (ISO) ✓ (*) EAN number ✓ (*) Email ...
Categories: Content editing experience, Security, Site structure
SpamSpan filter
The SpamSpan module obfuscates email addresses to help prevent spambots from collecting them. It is based on the technique from spamspan but has undergone major modifications, as the original...
Categories: Content display, Content editing experience, Security
Health check
Note from the maintainer If you need other endpoint than /health, please use the health_check_url module! Description Simple end point for load balancers (or Pingdom, OhDear, New Relic etc) to...
Categories: Administration tools, Developer tools, Security
Lightweight Directory Access Protocol
Lightweight Directory Access Protocol (LDAP) lets you: Login with LDAP credentials Single-Sign On available through 3rd party modules Provisioning from LDAP to Drupal Provisioning from Drupal to...
Categories: Access control, Integrations, Security
simpleSAMLphp Authentication
This module integrates Drupal with SimpleSAMLphp, the most robust and complete implementation of SAML in PHP. It makes it possible for Drupal to communicate with SAML or Shibboleth identity...
Categories: Access control, Integrations, Security
