How to Create an NFT Allowlist Form (Free Guide + Wallet Verification)

If your project is planning a mint, drop, or airdrop, an allowlist is how you make sure early access goes to real supporters instead of bots and duplicate entries. The form you use to collect it matters more than most teams expect — get it wrong and you'll spend launch day cleaning sybil-attacked submissions out of your snapshot.

What is an NFT allowlist?

An allowlist (also called a whitelist) is a pre-approved list of wallet addresses that get guaranteed or early access to a mint, drop, or token claim. Projects build the list ahead of launch — usually through a form — then check every mint transaction against it.

Why "paste your wallet address" forms get exploited

The most common way projects still collect allowlists is a plain text field asking respondents to type in their wallet address. The problem: a text field can't prove who actually controls that address. Anyone can paste any address — their own, a friend's, or one generated for the sole purpose of stuffing your allowlist. At scale, this is exactly how sybil attacks work: one person submits hundreds of entries, each looking like a unique legitimate applicant, and real community members get crowded out of a list that was supposed to reward them.

The fix: cryptographic wallet verification

Instead of typing an address, the respondent connects their wallet directly to the form and signs a message with it. That signature can only be produced by whoever holds the private key for that address — it's mathematical proof of ownership, not a claim you have to take on faith. Formz verifies that signature server-side before the submission is accepted, so every entry in your allowlist is tied to a wallet someone actually controls.

Wallet verification checks a signed message server-side, not a pasted address.

Building your allowlist form in Formz

1. Start from a new form and choose the Web3 Allowlist template, or start blank and add a Wallet Connect field — see Getting started if this is your first form.
2. Add the Wallet Connect field and pick which chain(s) respondents can verify on.
3. Add any other fields you want alongside it — Discord handle, Twitter/X via OAuth, an "how did you hear about us" question — all backed by real account verification, not self-reported text.
4. Optionally require a minimum entry score or referral count if you're running a viral waitlist instead of a flat allowlist.
5. Hit Go Live and share the link. Every submission arrives in your responses dashboard already wallet-verified, ready to export to CSV for your mint contract or allowlist tooling.

Optional: gate the form behind existing NFT ownership

If your allowlist is meant only for holders of an existing collection, you can go a step further and require a specific NFT, a minimum token balance, or an ENS name before the form even opens — with AND/OR logic across multiple conditions. Non-holders never see the form at all. This is the same gating engine behind Formz's NFT & token gating feature.

Gate the form itself behind existing NFT or token ownership.

Works across 8 blockchain ecosystems

Whatever chain your project is on, the same verification flow applies: EVM chains (Ethereum, Base, Polygon, Arbitrum, Optimism, and 30+ more), Solana, TON, Sui, Aptos, Starknet, NEAR, and Cosmos are all supported out of the box. See the full breakdown on the Web3 form builder page.

Upload an eligibility snapshot and let respondents check their own status instantly.

FAQ