This page holds some notes, tips, and best practices for configuring Drupal sites.
User Settings Config
Always make sure that the Require e-mail verification when a visitor creates an account checkbox is checked.
I highly suggest adding the following into the User registration guidelines text area:
On sites where users will be expected to register, the registration form should have a captcha. This is because spammers will try to register with bogus email addresses even though it does them no good. This causes bounces to get sent to the webmaster, which is very uncool.
- Captcha - the base
- Captcha Pack - extra types
- Recaptcha - a cool captcha, but needs special install handling
After installing the modules, make sure the permissions are set appropriately. It is good form to not enforce captchas for known users.