Easily add Cloudflare Turnstile to all your WordPress website forms to protect them from spam! A user-friendly, privacy-preserving reCAPTCHA alternative. 100% free! Supported Forms You can currently enable Turnstile on the following forms: WordPress Login Form Registration Form Password Reset Form C
This plugin is also compatible with WordPress Multisite, and most two-factor authentication (2FA) plugins.
Other Features
The plugin includes several other features and options:
Theme: Select the default theme for Turnstile.
Language: Set the default language for Turnstile.
Appearance Mode: Choose if Turnstile is always displayed, or only when an interaction is required.
Disable Submit Button: Disable the submit button on forms until the Turnstile challenge is completed.
Custom Error Message: Set your own custom error message for failed submissions.
Whitelist: Prevent Turnstile from showing for logged in users, or certain IP addresses (wildcards are not supported).
Resource Hint (Preconnect): Option to enable resource hint preconnect for improved performance.
Failsafe Mode: Option to enable failsafe mode. When Cloudflare is down, this mode will either allow submissions, or fallback to reCAPTCHA.
Debug Logging: Enable debug logging of Turnstile form submission events to help with troubleshooting.
Getting Started
It’s super quick and easy to get started with Cloudflare Turnstile!
01Simply generate a “site key” and “secret key” in your Cloudflare account, and add these in the plugin settings page.
02Select which forms Turnstile should be added to and click save.
03Finally, click the “TEST API RESPONSE” button to make sure the Turnstile API response is working OK.
04A new Cloudflare Turnstile challenge will then be displayed on your selected forms to protect them from spam!
For more detailed instructions, please see our setup guide .
What is Cloudflare Turnstile?
Cloudflare Turnstile delivers frustration-free, CAPTCHA-free web experiences to website visitors.
Turnstile is an anti-spam filter that stops abuse and confirms visitors are real without the data privacy concerns or awful UX that CAPTCHA thrusts on users.
Learn more here: https://www.cloudflare.com/en-gb/products/turnstile/
Is it free to use?
Yes, this plugin is completely free with no paid version, and does not include any additional data tracking.
Cloudflare Turnstile is also a completely free service.
Plugin Languages
Currently available in 14 languages . Thank you to all the contributers ! If you would like to help contribute translations, please click here .
Other Information
For help & suggestions, please create a support topic .
Follow the developer @ElliotSowersby on Twitter.
View on GitHub
Support The Plugin
If you would like to support the continued development and support of this plugin, you can make a donation .
Trademark Notice
Cloudflare, the Cloudflare logo, and Cloudflare Workers are trademarks and/or registered trademarks of Cloudflare, Inc. in the United States and other jurisdictions.
This plugin is not affiliated with, endorsed, or sponsored by Cloudflare, Inc.
See it in action
Screenshots & previews.
Example Turnstile on the WP Login PageExample Turnstile on the WP Register PageExample Turnstile on the WP Comments FormExample Turnstile on the WooCommerce My Account PageExample Turnstile on the WooCommerce Checkout PageExample Turnstile on a Contact FormExample Settings Page
02 / Source details
Gettingstarted.
01Upload ‘simple-cloudflare-turnstile’ to the ‘/wp-content/plugins/’ directory.
02Activate the plugin through the ‘Plugins’ menu in WordPress.
03Visit the plugin settings in WordPress admin menu at “Settings > Cloudflare Turnstile”.
04You will need to generate a “Site Key” and “Site Secret” in your Cloudflare account, then enter these in the settings page.
05Select which forms you want to enable Turnstile on, then click the “Save Changes” button.
06Finally, you will be required to complete a quick test of the widget by clicking “TEST API RESPONSE”, to confirm it’s working correctly.
07A new Cloudflare Turnstile challenge will then be displayed on your selected forms to protect them from spam!
For more detailed instructions, please see our setup guide .
03 / Source details
Frequently asked questions.
Do you have a setup guide?
Yes, you can view a setup guide for the plugin here .
Will there be more integrations be added in the future?
More integrations may be added in the future, based on user feedback. So if you have any suggestions please feel free to submit a support topic .
I need help, can I get support?
Please bare in mind, the Simple CAPTCHA with Cloudflare Turnstile plugin is 100% free, developed as a way to give back to the WordPress community.
You can post a support thread on the WordPress.org forums to get help from the community, and we will also keep an eye on this quite frequently, providing support and answers where possible. However, we can not guarantee an answer every single support ticket.
Click here to create a support topic.
The support forums are the only place you should submit a support ticket for 100% free support from the developer and the WordPress community.
Is the plugin free?
Yes, this plugin is completely free with no paid version, and does not include any additional data tracking.
Cloudflare Turnstile is also a completely free service.
Is this better for Data Privacy & GDPR?
Cloudflare mentions that they “never harvest data for ad retargeting” and Turnstile “never looks for cookies (like a login cookie), or uses cookies to collect or store information of any kind”.
Check out this article which explains more about how Turnstile has less data collection, more privacy, and same security.
View the Cloudflare GDPR compliance and Data Processing Addendum for more information how on they handle data.
I see a 401 console error, is this a problem?
You can safely ignore the error.
It is requesting a “Private Access Token (PAT) Open external link” that your device or browser does not support yet.
Click here for more information.
Turnstile Error Codes in Browser Console
For details on errors codes being displayed in your browser console, please refer to the Cloudflare documentation here .
The Turnstile Challenge is not appearing, what should I do?
Firstly, make sure you have completed the setup guide correctly, and that you have completed the “TEST API RESPONSE” on the settings page.
If you are still having issues, please post a support topic on the WordPress.org forums.
How can I report security bugs?
You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. Report a security vulnerability.
FinderPress Media Auditor helps site administrators scan for broken images, missing Media Library files, unreachable media URLs, and other media issues across WordPress content. Use it to audit images, video, audio, PDFs, featured images, and attachment files without sending scan data to an external
The Accepted Payment Methods plugin is a straightforward, lightweight solution that enhances your website by displaying visually appealing icons of the payment methods you accept. This plugin is ideal for a variety of websites, including e-commerce platforms, service-oriented websites, and informati
