Wondering how to add Cloudflare Turnstile CAPTCHA in WordPress? Our WordPress Support team is here to lend a hand with your queries and issues.

Cloudflare Turnstile CAPTCHA in WordPress

By using a non-intrusive technology like Turnstile, you can protect your website from spambots and automated scripts without annoying your visitors.

Today, let us see how our support techs add turnstile.

Spam is a big problem for all websites including WordPress.

If you run an online store, then automated scripts may even place fraudulent orders.

Cloudflare has introduced Turnstile CAPTCHA.

This alternative technology uses a selection of non-intrusive challenges that often run invisibly in the browser.

This allows you to protect your website without asking visitors to complete complex puzzles.

To help keep visitor information private, Cloudflare uses Apple’s Private Access Tokens to test whether the visitor is a real person without collecting extra data.

Install a WordPress Cloudflare CAPTCHA Plugin

The easiest way to add Cloudflare’s CAPTCHA to WordPress is by using Simple Cloudflare Turnstile.

This free plugin allows you to connect your website to the Turnstile service, and then check that it’s responding to your requests correctly.

Firstly, you’ll need to install and activate the plugin.

Upon activation, go to Settings » Cloudflare Turnstile.

The plugin will now ask you to provide a site key and site secret.

You can get these for free by clicking on the link next to ‘You can get your site key and secret from here.’

Get a Cloudflare Turnstile Site Secret and Site Key

The link will take you to the Cloudflare login page where you can register your domain and create a site key and site secret.

This is free, but you will need to create a Cloudflare account using your email address, if you haven’t already.

Once you’re logged into the Cloudflare dashboard, find ‘Turnstile’ in the left-hand menu and give it a click.

This will take you to a screen with some basic information about Cloudflare Turnstile.

If you’re happy to go ahead, then click on the ‘Add site’ button.

Start by typing in a ‘Site Name.’

Next, type your website’s domain name into the ‘Domain’ field.

The next step is choosing which CAPTCHA widget you want to create.

The first choice is ‘Managed,’ which is the method recommended by Cloudflare.

This is where Cloudflare analyzes the browser’s request and then decides what kind of challenge it should run.

While this is happening, the visitor will see a loading animation.

Wherever possible, Cloudflare will try to run a non-interactive challenge in the background, so the visitor doesn’t have to do anything.

In this case, the user will simply see a ‘Success’ message when their browser passes the test.

Sometimes, Cloudflare may decide that it’s safer to show an interactive challenge instead.

However, the visitor will simply need to check a box rather than complete a puzzle, so it’s still easier than the traditional puzzle-based CAPTCHAs.

Non-interactive challenges run in the browser so the visitor doesn’t have to take any action.

Just like the managed CAPTCHA, visitors will see the loading animation and a ‘Success’ message when the challenge is complete.

If you choose ‘Invisible’ instead, then the visitor won’t see the animation or success message.

This setting allows you to completely hide the CAPTCHA from your visitors, which can avoid confusion and won’t add any clutter to your WordPress theme.

After making your decision, click on the ‘Create’ button.

As soon as you’ve done that, Cloudflare will show your site key and secret key.

You can now add this information to the plugin’s settings on your website.

Add Cloudflare Turnstile CAPTCHA to Your WordPress Website

In your WordPress dashboard, head back to Settings » Cloudflare Turnstile.

You can now go ahead and add the ‘Site Key’ and ‘Site Secret’ to your WordPress dashboard.

After that, you may want to customize how the CAPTCHA looks on your website, and how it acts.

To start, you can open the ‘Theme’ dropdown and choose from light, dark, or auto.

By default, Cloudflare Turnstile shows a ‘Please verify that you are human’ message to visitors.

You may want to change this. For example, you might briefly explain why the CAPTCHA is so important, or that it will only take a few seconds to complete.

To add your own wording, simply type into the ‘Custom Error Message’ field.

After that, you can select the forms where you’ll use the Cloudflare Turnstile CAPTCHA.

The options you see may vary depending on the plugins you’ve installed, but by default, you can use Turnstile with all the built-in WordPress forms.

This includes the login page, user registration form, and password reset page.

When you’re happy with the information you’ve entered, scroll to the bottom of the screen and click on ‘Save Changes.’

Now, if you visit your website you’ll see the Turnstile CAPTCHA in action.

Conclusion

To conclude, our Support Engineers took us through the process of adding Cloudflare Turnstile CAPTCHA in WordPress.