Skip to content

RocketShield

Email validation for forms that stops fake signups

RocketShield checks every email address as it is typed, blocks disposable, invalid and undeliverable addresses before they reach your database. One script tag, no backend changes.

Start free See the snippet
  • One script tag
  • No backend changes
  • Rules you control
  • Unknowns are free

How it works

Live on your forms in three steps

Set your rules once in the dashboard. Every form on your site follows them.

  1. Create a shield

    In the dashboard, choose what to block, write your own message and list the websites the shield may run on.

  2. Paste one snippet

    Add the script tag with your public key to your site. Email fields are detected automatically, including forms that load later.

  3. Bad emails never get in

    Each address is checked as it is typed. Blocked addresses show your message and the form will not submit until it is fixed.

Your rules

Block exactly what you do not want

Turn each rule on or off per shield. A B2B signup form can reject free providers, while a newsletter form only stops disposable and undeliverable addresses.

  • Your own message

    Tell visitors what to do in your words, such as "Please use your work email address."

  • Allowed domains

    Lock each shield to your own websites, so your key cannot be reused anywhere else.

Setup

Paste one snippet. That is the whole integration.

Copy the snippet from your dashboard and add it to every page with a form, just before the closing body tag. Rules are managed in the dashboard, so you never need to redeploy to change them.

  • Finds every email input automatically, including forms added after page load
  • Optional per-site settings can make the rules stricter, never looser
  • Uses a public rs_ key, never your secret API key
<script>
  var rocketShieldConfig = {
    apikey: "rs_your_public_key",
  };
</script>
<script src="https://app.rocketverifier.com/widget/v2.js"></script>
<script>
  var rocketShieldConfig = {
    apikey: "rs_your_public_key",
    blockFreeProvider: true,
    blockedMessage: "Please use your work email address.",
  };
</script>
<script src="https://app.rocketverifier.com/widget/v2.js"></script>
<!-- Email inputs are found automatically.
     Add data-rocketshield to check any other field. -->
<input type="text" name="contact" data-rocketshield />

Works everywhere

Works on any site you can add a script to

Use a ready-made setup for your platform, or paste the snippet into any page.

Billing

Simple, predictable pricing

RocketShield uses the same credits as the rest of RocketVerifier, with no separate subscription. Credits never expire.

  • 1 credit per check

    Each address a visitor submits for checking uses 1 credit from your normal balance.

  • Unknowns are free

    If a mail server will not give a clear answer, you are not charged.

  • Repeat checks are cached

    The same address checked again on a page is answered from the browser cache, at no extra cost.

  • Built-in rate limiting

    Checks wait until the visitor stops typing, and per-visitor limits stop bots from draining your credits.

See pricing Need server-side checks? Use the API

FAQ

RocketShield, answered

Stop disposable and fake signups at the form, with 99.5% accurate verification behind every check.

What is RocketShield?

RocketShield is a small JavaScript widget that verifies email addresses as they are typed into your web forms. It blocks disposable, invalid, undeliverable and other unwanted addresses before the form is submitted, using the same verification engine as the RocketVerifier API.

Will it slow down my forms?

No. Checks run in the background as soon as the visitor pauses typing. The engine typically answers in under half a second, or 1 to 3 seconds when a live SMTP check is needed.

Which websites and form builders does it work with?

RocketShield works on any website where you can add a script tag: WordPress, Webflow, Shopify (as an app embed), BigCommerce (through Script Manager), React and other single-page apps, and plain HTML. Email inputs are detected automatically, and you can add data-rocketshield to any other field.

How is RocketShield billed?

Each check uses 1 credit from the same balance as the dashboard and API. Unknown results are free, and an address that is checked again on the same page is answered from the cache without another charge. Credits never expire.

Is it safe to put the key on my website?

Yes. RocketShield uses a public rs_ key that can only run shield checks, not your secret API key. Restrict it to your own domains in the dashboard, and requests from any other website are refused.

Should I also verify on my server?

For sign-ups that matter most, pair RocketShield with a server-side call to the Email Verification API. RocketShield gives visitors instant feedback in the browser, and the API confirms the address before you create the account.

Stop fake signups at the form

Create a shield, paste one snippet and every email field on your site is protected. Unknown results are always free.

Start free See pricing

100 free credits · No card required · Credits never expire