Overview
Cloudflare Turnstile is a free, privacy-preserving CAPTCHA alternative. This plugin acts as the glue between your WordPress forms and the Turnstile API and is also 100% free.
What the plugin does
- Renders the Turnstile widget inside the forms you choose.
- Verifies the resulting token server-side against
https://challenges.cloudflare.com/turnstile/v0/siteverifyon submission. - Blocks submission and shows a configurable error message if verification fails.
- Provides a wide library of native integrations for popular form, e-commerce, membership and community plugins.
- Offers optional failover to Google reCAPTCHA v2 if the Cloudflare API is unreachable.
- Logs verification events for debugging and tracks lightweight, on-site analytics.
What you need before you start
- A free Cloudflare account.
- A WordPress 4.7+ site with PHP 7.0+ recommended.
- Outbound HTTPS access from your server to
challenges.cloudflare.com.
The minimum setup flow
- Install and activate the plugin.
- Paste your Site Key and Secret Key.
- Run TEST API RESPONSE.
- Tick the boxes for the forms you want to protect.
- Save changes.
Note: This documentation is partially generated and maintained by AI, with human verification and changes. There may be mistakes.
