Why does Enter submit the form?
Browsers call it implicit submission. When you press Enter in a field, the browser acts as if you clicked the form's default button, which is the first submit button in the form. A <button> without a type counts: inside a form it is a submit button, and in our test Enter in a text field sent the form with that button's send=1. It is a convenience for search boxes and login forms, and a nuisance in a long form where people press Enter to move to the next field, or where a barcode scanner sends Enter after each code.
The rules have a few corners, so we checked them. On 6 November 2026 we built eight small forms and pressed Enter in each one in Chromium 153:
| Form | What Enter did |
|---|---|
| Two text fields and a Send button, Enter in the first field | Submitted, with the button's name and value |
| One text field, no button at all | Submitted |
| Two text fields, no button | Nothing |
Two text fields, only <button type="button"> | Nothing |
Two text fields, Send button disabled | Nothing |
Enter in a <textarea> | New line, no submit |
| Enter with a checkbox focused | Submitted |
| Two submit buttons, Delete first and Save second | Submitted as Delete |
Three results are worth a second look. A form with a single text field submits on Enter even without a button, which is how search boxes work. A focused checkbox submits the form too, so “only text fields” is not the whole list. And with two submit buttons Enter used the first one, Delete, and sent action=delete. If your form has a destructive button, put the safe one first in the HTML and move it visually with CSS if you need to.
How to stop Enter from submitting in JavaScript
Catch the key before it becomes a submission. One keydown listener on the form covers every field inside it:
- Skip the textarea, so Enter still makes a new line in the message.
- Skip buttons, so someone who tabs to Send and presses Enter can still send.
- Skip
event.isComposing. People typing Japanese, Chinese or Korean press Enter to confirm a word, and that Enter should never submit.
In our test this version blocked Enter in the text fields, kept the new line in the textarea, and the Send button still posted the form with all fields.
Use keydown. With preventDefault() on keyup the form was already on its way. keypress did block it, but that event is deprecated. Old snippets test event.keyCode === 13; that still worked in Chromium, where Enter reported key “Enter” and keyCode 13, but event.key is the readable, current property.
<form id="quote" action="https://formgong.com/submit" method="POST">
<input type="hidden" name="access_key" value="fk_your_access_key">
<label>Name <input name="name" required></label>
<label>Email <input type="email" name="email" required></label>
<label>Details <textarea name="message"></textarea></label>
<button type="submit">Send</button>
</form>
<script>
const form = document.getElementById("quote");
form.addEventListener("keydown", (event) => {
if (event.key !== "Enter") return;
if (event.isComposing) return; // Enter that confirms a Japanese or Chinese word
if (event.target instanceof HTMLTextAreaElement) return; // keep new lines in the message
if (event.target instanceof HTMLButtonElement) return; // Enter on the Send button still sends
event.preventDefault();
});
</script>Two popular fixes that break something
We also ran two versions that show up often in tutorials.
- Skipping checkboxes and radios. Some fixes return early when the focused input is a checkbox or radio, to leave those keys alone. But Enter on a focused checkbox submits the form (row 7 of the table), and with that fix it still did. Our version blocks it, and the Space key still ticked the box afterwards.
- Blocking every Enter in the form. A listener that calls
preventDefault()on every Enter, with no exception for the textarea, also stops new lines: we typed “line1”, Enter, “line2” into the message box and gotline1line2.
Why not just preventDefault in the submit handler?
Because the submit event can't tell you how it started. We logged event.submitter in the submit handler: for an Enter in a text field it was the Send button, exactly the same as for a real click. Call preventDefault() there and you have also disabled the button, which is what happened in our test. You only find out when nobody can send the form.
The no-JavaScript route also has a cost. Removing the submit button, or making it type="button", stopped Enter in our test, but then the form only sends through your script. If that script fails to load, nobody can send it. There is no HTML attribute that switches implicit submission off, and CSS can't touch it either.
Keyboard users often press Enter to send a short login or contact form, so we would keep the block to places where a stray Enter costs something: a long multi-step form, a barcode scanner, a grid of inputs. Keep the Send button visible there.
Make Enter move to the next field instead
For data-entry forms the friendlier option is to make Enter do what people expect from it there: go to the next field, and submit only from the last one. In our test the first Enter moved the focus from the name field to the email field, and the second Enter sent the form. On phones, add enterkeyhint="next" to every field but the last and enterkeyhint="send" to the last one, so the on-screen key says what it will do.
form.addEventListener("keydown", (event) => {
if (event.key !== "Enter" || event.isComposing) return;
if (!(event.target instanceof HTMLInputElement)) return;
const fields = [...form.querySelectorAll("input:not([type=hidden])")];
const i = fields.indexOf(event.target);
if (i < fields.length - 1) {
event.preventDefault();
fields[i + 1].focus(); // Enter moves on; on the last field it submits
}
});React, Vue and React Hook Form
The same listener works in any framework, because the key event comes from the browser. In React put it on the form: <form onKeyDown={(e) => { if (e.key === "Enter" && e.target.tagName !== "TEXTAREA" && e.target.tagName !== "BUTTON") e.preventDefault(); }}>. React Hook Form's handleSubmit runs on the submit event, so it can't tell an Enter from a click either; stop the key in onKeyDown as above and leave handleSubmit as it is. In Vue, @keydown.enter on the form with the same checks does the job. If only one field is the problem, say a search box inside a bigger form, @keydown.enter.prevent on that one input is enough and leaves the rest of the form alone.
What if a half-filled form gets through anyway?
Blocking Enter is about comfort, not safety. Someone with JavaScript off, or a bot, can still post a form with empty fields. The browser's required attribute stops most people, and the server should stop the rest.
If the form posts to Formgong, turn on field checks under Settings, then Protection, then Field checks. A post that misses a required field or has a broken email address is refused with a 422 that names each field, before anything reaches your inbox. And if people do send twice by pressing Enter and then clicking, our guide to stopping duplicate form submissions covers locking the button while the form sends.
The same account gives you an AI help chat that can answer the question that made someone stop halfway through the form, and a reviews widget for the page around it.
Did Enter behave differently for you?
If Enter submitted a form in a case we did not list, or our fix broke something like an autocomplete dropdown, tell us at support@formgong.com. We will test it and update the page.
Frequently asked questions
How do I stop the Enter key from submitting a form?
Add a keydown listener to the form and call event.preventDefault() for Enter, except in textareas and on buttons.
Why does my form submit when I press Enter?
Pressing Enter in a field clicks the form's first submit button. A form with only one text field submits on Enter even with no button.
Can I tell an Enter from a button click in the submit event?
No. In our test event.submitter was the Send button in both cases. Stop the Enter key in keydown instead.
How do I prevent Enter submit in React Hook Form?
Add onKeyDown to the form and prevent Enter outside textareas. handleSubmit runs on the submit event and can't tell Enter from a click.
Sources and documentation
Official references for this guide: . HTML forms, where data is stored.
Related guides
- Lovable form submissions to email and Telegram
- HTML contact form without a backend: a working example
- How to send website form submissions to Telegram
- Contact form not sending email? Check where it stops
- Managing website leads in Telegram without a CRM
- Form backend for Lovable, Bolt, v0, Cursor
- Telegram bot for a contact form: build or skip?
- GDPR form backend: 7 checks before you choose
- Lovable form not sending email? 6 fixes
- Netlify Forms not working? React and Bolt fixes
- Stop contact form spam without a CAPTCHA
- GitHub Pages contact form: a working setup
- Mailto Form in HTML: Why It Fails and What to Use
- HTML form to Google Sheets: 2 free methods
- Webflow form submission limit: what to do at 50
- Turnstile vs reCAPTCHA vs hCaptcha for forms
- Contact Form 7 and Elementor forms to Telegram
- Squarespace contact form not sending email?
- Shopify contact form: where do messages go?
- Google Form to Telegram: free Apps Script way
- Wix contact form not sending email? Fixes
- EU / GDPR Formspree alternatives compared
- HTML form action attribute explained
- How do HTML forms work? The HTTP request
- Types of Injection Attacks on Web Forms (2026)
- Indirect Prompt Injection in MCP
- MCP Rug Pull Attack: Detect Tool Changes
- Form without a backend: 7 ways that work
- Thank-you page after form submission (HTML)
- Indirect Prompt Injection Examples (2023–2026)
- Indirect Prompt Injection via Email
- What Is Tool Poisoning in MCP?
- WordPress contact form without a plugin
- Send email from frontend JavaScript
- How to Prevent Indirect Prompt Injection
- Honeypot Form Field: How to Add One That Works
- Contact Form with File Upload (HTML, No PHP)
- Angular contact form without a backend
- Send form submissions to Slack or Discord without Zapier
- Verify a form webhook signature (HMAC-SHA256)
- Contact forms that send nothing: 793 AI-built sites tested
- v0 contact form that actually sends: 3 ways
- How we tested AI-built contact forms, and 12 bugs we hit
- Cloudflare vs Netlify free plan: hosting that never pauses
- EmailJS 412 “Gmail_API: Invalid grant”: reconnect Gmail
- Resend “You can only send testing emails”: verify a domain
- Supabase Edge Function blocked by CORS policy: 3 causes
- Formspree “Form not found” and other errors: fixes
- Web3Forms errors: “Invalid access key” and 403 explained
- How to add customer reviews to your website for free
- Getform not working? “This form has been deleted” and more
- Next.js contact form not working? 6 errors, reproduced
- Webflow form not sending email? What to check, tested
- FormSubmit not working? “This form needs Activation” fix
- Contact form “TypeError: Failed to fetch”: causes and fixes
- WooCommerce product enquiry form
- Contact Form 7 vs WPForms
- Gravity Forms alternative free
- WordPress contact form block
- 535-5.7.8 Username and Password not accepted (Gmail)
- 535 5.7.3 Authentication unsuccessful: Office 365 SMTP
- Nodemailer “Missing credentials for "PLAIN"”: the fix
- Nodemailer “Greeting never received”: port 465 fix
- Nodemailer SSL “wrong version number”: the port fix
- Nodemailer “self-signed certificate in certificate chain”
- Nodemailer ECONNREFUSED 127.0.0.1:587: missing SMTP host
- SendGrid “authorization grant is invalid”: 401 fix
- Mailgun 401 Forbidden: why the API rejects your key
- “Edge Function returned a non-2xx status code”: the fix
- Next.js “Body exceeded 1 MB limit”: Server Action fix
- Unexpected token '<', "<!DOCTYPE "... is not valid JSON
- “TypeError: Body is unusable”: body has already been read
- Turnstile “timeout-or-duplicate” and other siteverify errors
- Turnstile vs hCaptcha vs reCAPTCHA: speed and size tested
- Judge.me reviews not showing on Shopify: how to fix it
- Judge.me review carousel not showing: how to fix it
- Yotpo reviews not showing on Shopify? Check the app embed
- Loox reviews not showing on product page: how to fix
- Shopify reviews not showing: what to check first
- How to show reviews on Shopify
- GDPR for website forms: what each type of form needs
- WooCommerce reviews not showing: how to fix it
- Stamped.io reviews not showing on Shopify: how to fix it
- Etsy reviews not showing: why and what to do
- Trustpilot widget not loading: how to fix TrustBox
- Yotpo problems in 2026: what merchants report
- Contact Form 7 “error trying to send your message” fix
- Elementor form “Your submission failed because of an error”
- Framer form not sending email or not working: what to check
- Carrd contact form not working: plans, spam and errors
- Google review link not working: what customers see and why
- tawk.to widget not showing on your website: causes and fixes
- How to add questions and answers to your product page
- “Failed to send a request to the Edge Function”: fixes
- Next.js “Failed to find Server Action”: what it means
- Brevo “unauthorized: Key not found” 401: the fix
- Amazon SES “Email address is not verified”: the fix
- Shopify contact form not working: how to fix it
- Judge.me alternative for WooCommerce after the 2025 shutdown
- Free WooCommerce review plugins compared on the free version
- WooCommerce review reminder emails without a paid plugin
- Add Voice Recording to a Website Form
- Contact Form 7 spam: how to stop it
- WPForms not sending email: how to fix it
- Contact form emails going to spam: how to fix it
- HTML form not submitting: how to fix it
- Contact form not working: how to find the fault
- Webflow form spam: how to stop it
- Website form to Notion: how to set it up
- Website form to WhatsApp: what works and what does not
- What 1-star reviews say about AI support chatbots
- Which free form backend gives you the most submissions?
- Elfsight reviews widget not showing? Check the view limit
- Next.js contact form backend vs Server Actions
- Review stars not showing in Google search results
- How to stop duplicate form submissions
- How to see which form leads came from ChatGPT
- What happens when a form webhook fails
- When to send a review request email after an order
- How to collect video testimonials for free
- Add contact form sign-ups to Mailchimp or Klaviyo
- How to migrate from Formspree without losing submissions
- How to get a Google review link for your business
- What is a headless form backend?
- Is it safe to put a form access key in your HTML?
- AI chatbot that answers only from your website
- Minified React error #441 in Next.js
- Squarespace product reviews after Judge.me
- Accessible contact form checklist for WCAG 2.2
- How to ask a client for a testimonial by email
- How to respond to negative reviews, with examples
- 429 Too Many Requests on a contact form
- MCP server for forms in Cursor and Claude
- Can you offer a discount for a review?
- Do EU stores have to say if reviews are verified?
- Webflow form backend options compared
- How to add review schema JSON-LD to a product page
- How to turn a customer review into an Instagram post
- How to make a QR code for Google reviews
- Live chat or chatbot for a small business website
- Why people abandon your contact form halfway
- Which form backend do AI assistants pick? 54 answers
- PHP mail() not sending email, even when it returns true
- What “Failed to fetch” means, tested in three browsers
- 405 Method Not Allowed when you submit a form
- Send a contact form to more than one email address
- What is review syndication, and who needs it?
- How to save HTML form data to a database
- NetworkError when attempting to fetch resource
- Send product reviews to Google Merchant Center
- PHPMailer not working on a live server
- AI review reply generator: does it help?
- React 19 contact form with useActionState
- Astro Actions or a form backend?
- Is no-reply@wixsiteautomations.com legit?
- Where to find the Judge.me review widget code
- AI review summaries: what shoppers actually see
- Photo reviews for WooCommerce, and the GPS inside them
- Review request email templates you can copy
- Reviews in AI search: what ChatGPT and Perplexity cite
- Lead capture form with UTM tracking, built and tested
- Form design best practices, with our own form data
- Client intake form template with file upload
- What is social proof? Meaning and examples
- What is user-generated content (UGC)?
- Benefits of negative reviews for your store
- How to get your first reviews as a new store
- How to use customer reviews in your marketing
- How to get more customer reviews
- React form validation without a library, tested
- jQuery submit form with validation
- reCAPTCHA v3 setup with the server score check
- Shopify social proof that shoppers can check
- HTML file input: accept, multiple, capture and size checks
- How to add hCaptcha to a form, with the server check
- How to add invisible reCAPTCHA to a form
- Bug report form template with browser details
- What the FTC fake reviews rule bans for online stores
- How to show reviews on your homepage
- Do reviews increase sales? What the studies show
- HTML input types and what each one sends
- HTML textarea, tested in a real form
- HTML dropdown menu in a form, tested
- Do reviews help SEO? What Google says and shows
- How to add a review carousel people can read
- Product review examples that help shoppers decide
- Which trust badges actually mean something
- Customer satisfaction survey with CSAT and NPS
- JavaScript FormData and what fetch actually sends
- JavaScript form validation without a library
- Server-side form validation and what it catches
- Email validation in JavaScript, tested on 33 addresses
- Zod form validation with FormData, tested
- Store reviews vs product reviews
- How to send review requests through Klaviyo
- How to tag customer reviews by topic and mood
- Custom review form questions worth asking
- Online reputation management for small businesses
- HTML radio button groups and what they send
- HTML label tag and what screen readers hear
- HTML autocomplete attribute, tested with Chrome autofill
- HTML fieldset and legend, and what disabled leaves out
- HTML button tag and what a form button sends
- Vite contact form that still works after the build
- How to test a contact form, end to end
- How to embed a Google Form, and what it loads
- Customer feedback questions that get real answers
- How to convert a file to base64 in JavaScript
- FilePond with a form backend, and when to skip it
- Bootstrap form validation and server errors
- Tailwind form validation, tested in three browsers
- Donation form in HTML, and where the payment goes
- How to ask for a review in person or by text
- Which review sites matter for your business
- What are customer reviews, and which kinds count
- Online review statistics, checked at the source
- Best review app for Shopify and WooCommerce
- Why Gmail sends your self-hosted mail to spam
- htmx contact form that sends to another domain
- AI form builders tested, from prompt to sent form
- Headless WordPress forms with Contact Form 7, tested
- React Hook Form watch vs useWatch, and what gets sent
- Elfsight widget not working? It vanishes when views run out
- Jotform not sending emails? Check Jotform's bounce list
- Typeform not working? A white box means a blocked script
- Positive review response examples that don't sound copied
- How to remove a Google review when you can't delete it
- Google reviews not showing up? 8 causes to check in order
- Is buying Google reviews illegal? Even a review swap counts
- Which reviews can you hide? A review moderation checklist
- Average star rating: what 4.8 from 5 reviews means
- Reviews on a product page: where and how many to show
- SaaS testimonials: 3 of 27 had a number in them
- Do reviews reduce returns? Not when they're too good
- Testimonial examples for business: what makes one believable
- Testimonial questions to ask clients, by type of business
- Testimonial page design: a page or a section?
- Testimonial advertising rules: what the FTC requires
- Form submission canceled because the form is not connected
- Input type date format dd/mm/yyyy: what you can change
- How to disable textarea resize, or allow only vertical
- form.submit() vs requestSubmit(): what submit() skips
- Custom HTML checkbox CSS that doesn't break required
- How to reset a form after submit, and what reset() keeps
- Input type number maxlength not working? What to use
- How to create an HTML form, step by step
- Best form builder: free plans and branding, checked
- Best WordPress contact form plugin: 10 free ones compared
- How to increase form conversion rate: start with the count
- Form backend vs form builder: which one do you need?
- WordPress contact form not sending email? 3 plugins tested
- Contact Form 7 webhook? Turning it on switched our email off
- Gravity Forms webhook: what it sends and the URLs it rejects