How to Add Cloudflare Turnstile CAPTCHA to WordPress (2024)

Are you looking to add security features to your WordPress forms? It’s now possible, thanks to Cloudflare’s Turnstile Captcha feature.

Integrating this high-security feature into your WordPress forms, such as WPForms, can make them more secure and prevent spam.

In this post, we will provide you with a complete step-by-step guide on how to add Cloudflare Turnstile Captcha in WordPress in a very comprehensive way.

So without further delay, let’s get started.

What is Cloudflare’s Turnstile Captcha Feature?

Cloudflare Turnstile is a tool that helps protect your website from bots without using traditional CAPTCHAs, which often ask users to solve puzzles or identify images. Instead, Turnstile uses signals from your browser and machine learning to figure out if you’re a real person, all while respecting your privacy.

In simple terms, it’s a free alternative to tools like reCAPTCHA, which require users to complete annoying tasks to prove they’re not bots.

Here’s why Cloudflare Turnstile is considered better:

• Free and Unlimited: Unlike some other CAPTCHA services that have started charging for higher usage, Cloudflare Turnstile offers unlimited protection for free.
• No Annoying Puzzles: It keeps your forms free of spam without making users identify images or solve puzzles, which improves the overall user experience.
• Easy to Use: You don’t need to be a Cloudflare customer to use Turnstile—anyone with a website can sign up and start using it for free.

Overall, Cloudflare Turnstile makes it easier for real users to interact with your site while effectively blocking bots, without the hassles of traditional CAPTCHAs.

Why you should even consider adding Cloudflare Turnstile CAPTCHA in WordPress?

Cloudflare Turnstile is an improved way to protect your website and users from spam and bots. It works quietly in the background, so visitors don’t have to solve puzzles or complete annoying verifications.

Why Turnstile is Great:

• Invisible Spam Protection: For most users, Turnstile operates without showing any challenges, keeping the experience smooth and hassle-free.
• Privacy-Focused: Unlike some CAPTCHAs that track behavior or use data for ads, Turnstile doesn’t collect personal information, making it more trustworthy.
• Quick and Free Setup: You can set up Cloudflare Turnstile on your website in just a few minutes, without any cost.

Why Use Cloudflare Turnstile with WordPress?

Turnstile is an excellent way to protect your WordPress site, whether it’s a contact form, an online store (like WooCommerce), or any other part of your site.

Spam and bots can cause problems like:

• Sending spam links or emails
• Attempting to break into login forms
• Flooding your site with fake submissions or orders

These issues can lead to security risks and a poor experience for visitors. Traditional CAPTCHA tools often provide poor user experiences and raise privacy concerns.

Cloudflare Turnstile addresses these issues with invisible, non-intrusive checks that protect your site without annoying your visitors. It uses Apple’s Private Access Tokens to verify users without collecting extra data.

Turnstile also integrates easily with popular plugins like form builders and WooCommerce, making it simple to add this protection across your WordPress site.

Overall, Cloudflare Turnstile offers a smooth, secure, and privacy-friendly way to keep your website safe from bots and spam.

How to add Cloudflare Turnstile CAPTCHA in WordPress?

There are three best ways through which you can add Cloudflare Tunstile CAPTCHA in WordPress. Choose the best one that better aligns with your needs.

1. Add Cloudflare Turnstile CAPTCHA to Your WordPress Forms Using WPForms

2. How to Add Cloudflare Turnstile CAPTCHA to other areas of Your WordPress Website (Comments, Woocommerce, and more)

1. How to Add Cloudflare Turnstile CAPTCHA to Your WordPress Forms Using WPForms

One of the most straightforward methods to add the Cloudflare Tunstile Captcha feature to your WordPress is via WPForms.

The best thing about WPFOrms is that they provide you with a dedicated section to integrate Cloudflare Tunstile so that you can implement this feature effortlessly anywhere in the form.

Here’s how you can do it.

Step 1: Install the WPForms Plugin

• Go to your WordPress dashboard.
• Navigate to Plugins » Add New.
• Search for WPForms.
• Click Install Now and then Activate.

Step 2: Configure CAPTCHA Settings in WPForms

• In your WordPress dashboard, go to WPForms » Settings.

• Click on the CAPTCHA tab.

• Choose Turnstile from the CAPTCHA options.

Step 3: Get Your Cloudflare Site Key and Secret Key

• Open a new browser tab and go to the Cloudflare login page.
• Log in or create a new account using your email address.
• In the Cloudflare dashboard, find Turnstile in the left-hand menu and click on it.

• Click on Add site.

• Type in a name for your site (this is for your reference).
• Enter your website’s domain name in the Domain field.

During this process, you might notice that a loading animation somewhat like this:

• Choose the type of CAPTCHA:
  • Managed: Automatically selects the best challenge type for your visitors.
  • Non-interactive: Runs in the background without needing visitor input.
  • Invisible: Completely hides the CAPTCHA from visitors.

• Click Create to generate your Site Key and Secret Key.

Step 4: Add the Site Key and Secret Key to WPForms

• Go back to the WPForms CAPTCHA settings in your WordPress dashboard.
• Enter the Site Key and Secret Key from Cloudflare into the respective fields.

• Click Save Settings.

How to add Turnstile Captach to your WPFROMs

Step 1: Create a New Form in WPForms

• Go to WPForms:From your WordPress dashboard, go toWPForms » Add New.

• Name Your Form:Type a name for your form in the ‘Name Your Form’ field. This is just for your reference.
• Choose a Template:WPForms offers ready-made templates (e.g., contact form, newsletter signup). Click the‘Use Template’button to select one.

Step 2: Customize Your Form

• Edit Fields:In the WPForms editor, click on any field to customize it. The settings for the selected field will appear in the sidebar.
• Rearrange Fields:Use drag and drop to change the order of the fields.

Step 3: Add Cloudflare Turnstile CAPTCHA

• Add Turnstile Field:Click on the‘Add Fields’tab on the left menu.
• Select Turnstile:Find the‘Turnstile’field and click to add it to your form.

• Check Turnstile Enabled:You’ll see a ‘Turnstile Enabled’ icon at the top right, confirming your form is protected with Cloudflare Turnstile.

Step 4: Enable Turnstile in Settings (Optional)

• Go to Form Settings:In the left menu, clickSettingsand then select‘Spam Protection and Security.’
• Enable Turnstile:Toggle the‘Enable Cloudflare Turnstile’switch from grey (off) to blue (on).

Step 5: Save and Add Your Form to a Page or Post

• Save the Form:Click the‘Save’button when you’re done customizing.
• Add Form to a Page/Post:
  • Go to the page or post where you want to display the form.
  • Click the‘+’icon and type ‘WPForms’ in the search box.
  • Select theWPForms blockto add it to the page.

• In the WPForms block, select the form you just created from the dropdown.

• Publish Your Page:ClickUpdateorPublishto make your form live.

Now, visit your page or post, and you’ll see the form with Cloudflare Turnstile CAPTCHA active.

2. How to Add Cloudflare Turnstile CAPTCHA to other areas of Your WordPress Website (Comments, Woocommerce, and more)

If you want to implement this security feature other than that use WPForms such as in the comment section to avoid Spam as well as Woocommerce. You can do it by installing a simple and Free Cloudflare Turnstile plugin.

Here’s How you can do it.

Step 1: Install and Activate the Plugin

• Install Simple Cloudflare Turnstile:From your WordPress dashboard, go toPlugins » Add Newand search for “Simple Cloudflare Turnstile.”
• Activate the Plugin:Click‘Install Now’and then‘Activate’.

Step 2: Get Your Site Key and Site Secret

• Go to Settings:After activation, navigate toSettings » Cloudflare Turnstile.

• Add Site Key and Secret Key:You’ll need aSite KeyandSite Secretfrom your Cloudflare Turnstile account. Enter these keys into the respective fields in your WordPress dashboard.

Step 3: Customize CAPTCHA Appearance and Behavior

• Choose a Theme:In the‘Theme’dropdown, selectlight, dark, or autoto match your site’s style.
• Set Language Options:For international sites, choose‘Auto Detect’in the‘Language’field to automatically use the visitor’s language.
• Adjust Appearance Mode:In‘Appearance’ Mode, choose‘Always’to show the CAPTCHA for all users, or adjust based on user interactions.

Step 4: Configure Advanced Settings

• Defer Scripts:InAdvanced Settings, you can enable script deferral to speed up page loading. If it causes issues, you can turn it off.
• Customize Messages:You can personalize the error messages shown during CAPTCHA challenges. Type your preferred text in the‘Custom Error Message’field.
• Enable Extra Failure Message:If you want, add an additional failure message that appears if a user fails the challenge.

Step 5: Adjust Whitelist Settings

• Whitelist Users and IPs:You can set logged-in users or specific IP addresses to bypass the CAPTCHA by configuring theWhitelist Settings.

Step 6: Select Areas to Add Turnstile CAPTCHA

• Enable for WordPress Forms:Scroll to select areas where you want to enable Turnstile, like thelogin page, registration form, and password reset page.
• Enable for WooCommerce:If you have WooCommerce, you can expand theWooCommerce Formssection and check the boxes next to pages you want to protect (e.g., login, signup, and checkout pages).

Step 7: Save Your Changes

• Save Settings:When you’ve configured everything to your liking, scroll to the bottom and click‘Save Changes’.

Conclusion

No doubt, Cloudflare Turnstile can be the best alternative to traditional reCAPTCHA. But it is not the only way that you can secure your website.

If you are wondering How to secure your website without implementing any reCAPTCHA feature, consider our dedicated blog on “ How To Protect Your WordPress Site: Ultimate WordPress Security Checklist”.

And last, we hope this article/blog will help you to figure out how to add Cloudflare Turnstile CAPTCHA in WordPress and you will be able to secure your website.

If you have any suggestions or doubts feel free to write in the comment section below.