The manuals state that you need to use the %form_honeypot_field% keyword to print the field on the front end. Then you use CSS or JS to hide the field from view from the user. This means that regular "human" users won't see it and won't fill it out, but spam bots will.