Cloudflare Turnstile is a privacy-focused, user-friendly alternative to traditional CAPTCHAs that helps protect your website from spam and bots without annoying your visitors. It works silently in the background to verify real users while keeping forms and login pages secure. In this article, we’ll guide you through the simple steps to set up Cloudflare Turnstile on your website and start enhancing your site’s security effortlessly.
Please note: this will only work if Cloudflare is set up on your domain.
First, we need to log in to the admin area of our website and install the simple Cloudflare Turnstile plugin.
The plugin will ask for a Site Key and Secret Key, which you’ll need to generate from your Cloudflare dashboard.
If you're using Cloudflare through BigScoots, go to WPO > My Sites > select your domain > Cloudflare > Access. There, you'll find your Cloudflare login details. If you don't see them, please open a support ticket and we'll provide you with your Cloudflare account credentials.
Log in to your Cloudflare account using the credentials provided.
Click on the account where your domain is set up in Cloudflare, then select the Turnstile option from the menu.
Click on ‘Add Widget’ to create a new Turnstile challenge.
You’ll be asked to name the widget. Then, click 'Add Hostname' and enter your domain, choose the widget mode, and click 'Create' to finish setup.
Managed
Cloudflare decides if a challenge is needed based on the visitor’s behavior. If triggered, the user just checks a simple box—no puzzles or image tests.
Non-interactive
Runs quietly in the background with a small loading bar visible to the user. No clicks or actions are required, offering smooth user experience.
Invisible
Completely hidden from the user with no visible widget or interaction. Verifies visitors silently unless suspicious behavior is detected.
Once you've selected your widget and clicked 'Create,' you’ll receive the Site Key and Secret Key.
Now, copy and paste both the Site Key and Secret Key into your WordPress admin area under Cloudflare Turnstile settings, then click 'Save'.
In the plugin settings, you’ll see options to choose where to enable Cloudflare Turnstile. Select your preferred locations, then click 'Save'.
You can also test it on your WordPress admin password reset page—Cloudflare Turnstile should appear there as a challenge.
Congratulations! You’ve successfully configured Cloudflare turnstile on your website.
If you have any questions, please don’t hesitate to contact our team via live chat.
For technical inquiries, please feel free to reach our support team by emailing support@bigscoots.com from your registered email or by submitting a support ticket.