sandywp / plugins / simple-cloudflare-turnstile
Simple CAPTCHA with Cloudflare Turnstile
Add Cloudflare Turnstile to WordPress, WooCommerce, Contact Forms & more. The user-friendly, privacy-preserving reCAPTCHA alternative. 100% free!
Ready in seconds.
v1.42.1 200,000+ installs WP 4.7+

What you get inside
7 screens-
Example Turnstile on the WP Login Page
-
Example Turnstile on the WP Register Page
-
Example Turnstile on the WP Comments Form
-
Example Turnstile on the WooCommerce My Account Page
-
Example Turnstile on the WooCommerce Checkout Page
-
Example Turnstile on a Contact Form
-
Example Settings Page
About this plugin
Easily add Cloudflare Turnstile to all your WordPress website forms to protect them from spam!
A user-friendly, privacy-preserving reCAPTCHA alternative. 100% free!
Supported Forms
You can currently enable Turnstile on the following forms:
WordPress
- Login Form
- Registration Form
- Password Reset Form
- Comments Form
WooCommerce
- Checkout
- Pay For Order
- Account Details Form
- Login Form
- Registration Form
- Password Reset Form
Form Plugins
- WPForms
- Fluent Forms
- Contact Form 7
- Gravity Forms
- Formidable Forms
- Forminator Forms
- Jetpack Forms
- Kadence Forms
- SureForms
Other Integrations
- Elementor Pro Forms
- Easy Digital Downloads Forms
- Paid Memberships Pro Forms
- Mailchimp for WordPress Forms
- MailPoet Forms
- BuddyPress Registration Form
- bbPress Create Topic & Reply Forms
- MemberPress Forms
- Ultimate Member Forms
- WP-Members Forms
- WP User Frontend Forms
- WP User Manager Forms
- wpDiscuz Comments Form
- CheckoutWC & Flux Checkout
- Sunshine Photo Cart
This plugin is also compatible with WordPress Multisite, and most two-factor authentication (2FA) plugins.
Other Features
The plugin includes several other features and options:
- Theme: Select the default theme for Turnstile.
- Language: Set the default language for Turnstile.
- Appearance Mode: Choose if Turnstile is always displayed, or only when an interaction is required.
- Disable Submit Button: Disable the submit button on forms until the Turnstile challenge is completed.
- Custom Error Message: Set your own custom error message for failed submissions.
- Whitelist: Prevent Turnstile from showing for logged in users, or certain IP addresses (wildcards are not supported).
- Resource Hint (Preconnect): Option to enable resource hint preconnect for improved performance.
- Failsafe Mode: Option to enable failsafe mode. When Cloudflare is down, this mode will either allow submissions, or fallback to reCAPTCHA.
- Debug Logging: Enable debug logging of Turnstile form submission events to help with troubleshooting.
Getting Started
It’s super quick and easy to get started with Cloudflare Turnstile!
- Simply generate a “site key” and “secret key” in your Cloudflare account, and add these in the plugin settings page.
- Select which forms Turnstile should be added to and click save.
- Finally, click the “TEST API RESPONSE” button to make sure the Turnstile API response is working OK.
- A new Cloudflare Turnstile challenge will then be displayed on your selected forms to protect them from spam!
For more detailed instructions, please see our setup guide.
What is Cloudflare Turnstile?
Cloudflare Turnstile delivers frustration-free, CAPTCHA-free web experiences to website visitors.
Turnstile is an anti-spam filter that stops abuse and confirms visitors are real without the data privacy concerns or awful UX that CAPTCHA thrusts on users.
Learn more here: https://www.cloudflare.com/en-gb/products/turnstile/
Is it free to use?
Yes, this plugin is completely free with no paid version, and does not include any additional data tracking.
Cloudflare Turnstile is also a completely free service.
Plugin Languages
Currently available in 14 languages. Thank you to all the contributers! If you would like to help contribute translations, please click here.
Other Information
- For help & suggestions, please create a support topic.
- Follow the developer @ElliotSowersby on Twitter.
- View on GitHub
Support The Plugin
If you would like to support the continued development and support of this plugin, you can make a donation.
Trademark Notice
Cloudflare, the Cloudflare logo, and Cloudflare Workers are trademarks and/or registered trademarks of Cloudflare, Inc. in the United States and other jurisdictions.
This plugin is not affiliated with, endorsed, or sponsored by Cloudflare, Inc.
Questions
- Do you have a setup guide?
Yes, you can view a setup guide for the plugin here.
- Will there be more integrations be added in the future?
More integrations may be added in the future, based on user feedback. So if you have any suggestions please feel free to submit a support topic.
- I need help, can I get support?
Please bare in mind, the Simple CAPTCHA with Cloudflare Turnstile plugin is 100% free, developed as a way to give back to the WordPress community.
You can post a support thread on the WordPress.org forums to get help from the community, and we will also keep an eye on this quite frequently, providing support and answers where possible. However, we can not guarantee an answer every single support ticket.
Click here to create a support topic.
The support forums are the only place you should submit a support ticket for 100% free support from the developer and the WordPress community.
- Is the plugin free?
Yes, this plugin is completely free with no paid version, and does not include any additional data tracking.
Cloudflare Turnstile is also a completely free service.
- Is this better for Data Privacy & GDPR?
Cloudflare mentions that they “never harvest data for ad retargeting” and Turnstile “never looks for cookies (like a login cookie), or uses cookies to collect or store information of any kind”.
Check out this article which explains more about how Turnstile has less data collection, more privacy, and same security.
View the Cloudflare GDPR compliance and Data Processing Addendum for more information how on they handle data.
- I see a 401 console error, is this a problem?
You can safely ignore the error.
It is requesting a “Private Access Token (PAT) Open external link” that your device or browser does not support yet.
Click here for more information.
- Turnstile Error Codes in Browser Console
For details on errors codes being displayed in your browser console, please refer to the Cloudflare documentation here.
- The Turnstile Challenge is not appearing, what should I do?
Firstly, make sure you have completed the setup guide correctly, and that you have completed the “TEST API RESPONSE” on the settings page.
If you are still having issues, please post a support topic on the WordPress.org forums.
sandywp / also on the shelf
Try another plugin
4.3 · 600K+ installs
Adds WordPress login and admin protections, including CAPTCHA, login lock, login alerts, renamed login URLs, and SiteGuard WAF…
CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact…
3.8 · 300K+ installs
Add hCaptcha, Honeypot, and Redirection to Contact Form 7 with CF7 Apps, and generate forms effortlessly with AI. Improve form…
4.2 · 300K+ installs
Really Simple CAPTCHA is a CAPTCHA module intended to be called from other plugins. It is originally created for my Contact Form…
Spin up a real WordPress site in seconds.
Test plugins, build a demo, hand a client a link — then squash it and start again. No local setup, no Docker.