Do you want to add Cloudflare Turnstile CAPTCHA in WordPress?
CAPTCHA and reCAPTCHA can stop spambots, but they’re also unpopular with visitors. By using a non-intrusive technology like Turnstile, you can protect your website from spambots and automated scripts without annoying your visitors.
In this article, we will show you how to add Cloudflare Turnstile to your WordPress website.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 150 How to add Cloudflare Turnstile CAPTCHA in WordPress](https://cdn2.wpbeginner.com/wp-content/uploads/2022/11/how-to-add-cloudflare-turnstile-captcha-in-wordpress-og.png)
Why Add Cloudflare Turnstile CAPTCHA in WordPress?
Spam is a big problem for all websites including WordPress. Spambots can use non-secure forms to send you spammy links, which will make it more difficult for you to do lead generation.
They can also try to break into your site’s login form by using brute force attacks or flooding your site with spam comments that’ll damage the visitor experience and your WordPress SEO.
If you run an online store, then automated scripts may even place fraudulent orders.
Many website owners use CAPTCHA and reCAPTCHA to block scripts and bots. However, a lot of people complain that these technologies deliver a poor user experience, and some even worry about CAPTCHAs stealing their data.
With that being said, Cloudflare has introduced Turnstile CAPTCHA. This alternative technology uses a selection of non-intrusive challenges that often run invisibly in the browser. This allows you to protect your website without asking visitors to complete complex puzzles.
To help keep visitor information private, Cloudflare uses Apple’s Private Access Tokens to test whether the visitor is a real person without collecting extra data.
If you’re using form builders or WooCommerce, then Turnstile also integrates with these third-party plugins. This allows you to add invisible CAPTCHAs across many different areas of your WordPress website.
With that in mind, let’s see how you can add Cloudflare Turnstile CAPTCHA in WordPress. Simply use the quick links below to jump between the different steps.
Install a WordPress Cloudflare CAPTCHA Plugin
The easiest way to add Cloudflare’s CAPTCHA to WordPress is by using Simple Cloudflare Turnstile. This free plugin allows you to connect your website to the Turnstile service, and then check that it’s responding to your requests correctly.
First, you’ll need to install and activate the plugin. If you need help, then please see our guide on how to install a WordPress plugin.
Upon activation, go to Settings » Cloudflare Turnstile.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 151 Adding a site key and secret key to a WordPress website](https://cdn2.wpbeginner.com/wp-content/uploads/2022/11/settings-cloudflare-turnstile.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 152 Adding a site key and secret key to a WordPress website](https://cdn2.wpbeginner.com/wp-content/uploads/2022/11/settings-cloudflare-turnstile.png)
The plugin will now ask you to provide a site key and site secret.
You can get these for free by clicking on the link next to ‘You can get your site key and secret from here.’
Get a Cloudflare Turnstile Site Secret and Site Key
The link will take you to the Cloudflare login page where you can register your domain and create a site key and site secret. This is free, but you will need to create a Cloudflare account using your email address, if you haven’t already.
Once you’re logged into the Cloudflare dashboard, find ‘Turnstile’ in the left-hand menu and give it a click.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 153 The Cloudflare dashboard](https://cdn3.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-dashboard-turnstile.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 154 The Cloudflare dashboard](https://cdn3.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-dashboard-turnstile.png)
This will take you to a screen with some basic information about Cloudflare Turnstile.
If you’re happy to go ahead, then click on the ‘Add site’ button.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 155 Adding a site to the Cloudflare dashboard](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-add-site.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 156 Adding a site to the Cloudflare dashboard](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-add-site.png)
On this screen, start by typing in a ‘Site Name.’
This is just for your reference so you can use anything you want.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 157 Adding a WordPress website to the Cloudflare dashboard](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-site-name.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 158 Adding a WordPress website to the Cloudflare dashboard](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-site-name.png)
Next, type your website’s domain name into the ‘Domain’ field.
The next step is choosing which CAPTCHA widget you want to create. The first choice is ‘Managed,’ which is the method recommended by Cloudflare. This is where Cloudflare analyzes the browser’s request and then decides what kind of challenge it should run.
While this is happening, the visitor will see a loading animation.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 159 Adding a Cloudflare Turnstile CAPTCHA to WordPress](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-automatic-captcha.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 160 Adding a Cloudflare Turnstile CAPTCHA to WordPress](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-automatic-captcha.png)
Wherever possible, Cloudflare will try to run a non-interactive challenge in the background, so the visitor doesn’t have to do anything.
In this case, the user will simply see a ‘Success’ message when their browser passes the test.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 161 Creating a managed Cloudflare Turnstile CAPTCHA](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-managed-captcha.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 162 Creating a managed Cloudflare Turnstile CAPTCHA](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-managed-captcha.png)
Sometimes, Cloudflare may decide that it’s safer to show an interactive challenge instead. However, the visitor will simply need to check a box rather than complete a puzzle, so it’s still easier than the traditional puzzle-based CAPTCHAs.
Unless you have a specific reason not to, it’s smart to use managed CAPTCHAs as this gives you a good level of security with minimum impact on the visitor experience.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 163 How to create a managed CAPTCHA for WordPress](https://cdn.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-turnstile-captcha.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 164 How to create a managed CAPTCHA for WordPress](https://cdn.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-turnstile-captcha.png)
Don’t want to use interactive challenges on your WordPress website? Then you can choose ‘Non-interactive’ or ‘Invisible’ instead.
Non-interactive challenges run in the browser so the visitor doesn’t have to take any action. Just like the managed CAPTCHA, visitors will see the loading animation and a ‘Success’ message when the challenge is complete.
If you choose ‘Invisible’ instead, then the visitor won’t see the animation or success message. This setting allows you to completely hide the CAPTCHA from your visitors, which can avoid confusion and won’t add any clutter to your WordPress theme.
After making your decision, click on the ‘Create’ button.
As soon as you’ve done that, Cloudflare will show your site key and secret key.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 165 Creating a site key and secret key for your WordPress website](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-site-secret.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 166 Creating a site key and secret key for your WordPress website](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-site-secret.png)
You can now add this information to the plugin’s settings on your website.
Add Cloudflare Turnstile CAPTCHA to Your WordPress Website
In your WordPress dashboard, head back to Settings » Cloudflare Turnstile. You can now go ahead and add the ‘Site Key’ and ‘Site Secret’ to your WordPress dashboard.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 167 Adding the Cloudflare secret key and site secret to WordPress](https://cdn.wpbeginner.com/wp-content/uploads/2022/12/cloudflare-turnstile-keys.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 168 Adding the Cloudflare secret key and site secret to WordPress](https://cdn.wpbeginner.com/wp-content/uploads/2022/12/cloudflare-turnstile-keys.png)
After that, you may want to customize how the CAPTCHA looks on your website, and how it acts. To start, you can open the ‘Theme’ dropdown and choose from light, dark, or auto.
The following image shows an example of how the ‘Dark’ theme looks in the WordPress comment section.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 169 A Cloudflare Turnstile CAPTCHA with a dark theme](https://cdn.wpbeginner.com/wp-content/uploads/2022/11/turnstile-dark-theme.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 170 A Cloudflare Turnstile CAPTCHA with a dark theme](https://cdn.wpbeginner.com/wp-content/uploads/2022/11/turnstile-dark-theme.png)
By default, Cloudflare Turnstile shows a ‘Please verify that you are human’ message to visitors. You may want to change this. For example, you might briefly explain why the CAPTCHA is so important, or that it will only take a few seconds to complete.
To add your own wording, simply type into the ‘Custom Error Message’ field.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 171 Creating a custom error message for a WordPress CAPTCHA](https://cdn2.wpbeginner.com/wp-content/uploads/2022/11/custom-error-message.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 172 Creating a custom error message for a WordPress CAPTCHA](https://cdn2.wpbeginner.com/wp-content/uploads/2022/11/custom-error-message.png)
After that, you can select the forms where you’ll use the Cloudflare Turnstile CAPTCHA.
The options you see may vary depending on the plugins you’ve installed, but by default, you can use Turnstile with all the built-in WordPress forms. This includes the login page, user registration form, and password reset page.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 173 Enabling Cloudflare Turnstile CAPTCHA for the WordPress forms](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/wordpress-captcha-forms.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 174 Enabling Cloudflare Turnstile CAPTCHA for the WordPress forms](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/wordpress-captcha-forms.png)
When you’re happy with the information you’ve entered, scroll to the bottom of the screen and click on ‘Save Changes.’
Now, if you visit your website you’ll see the Turnstile CAPTCHA in action.
Bonus: Add Turnstile CAPTCHA to Your WordPress Forms
WordPress comes with different built-in forms, but you’ll often want to create custom forms. For example, you might replace the default forms with professionally-designed alternatives that better suit your website.
You can also add forms that are missing from the core WordPress software, such as contact forms and online order forms.
Simple Cloudflare Turnstile integrates with the best contact form plugins for WordPress including WPForms and Formidable Forms. This allows you to add the same advanced CAPTCHAs to all your forms, no matter how you created them.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 175 How to add a CAPTCHA to a WordPress contact form](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/contact-form-captcha.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 176 How to add a CAPTCHA to a WordPress contact form](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/contact-form-captcha.png)
To add a CAPTCHA to any WPForms or Formidable Forms page, simply go to Settings » Cloudflare Turnstile in your WordPress dashboard.
At the bottom of the page, you should see a section for either WPForms or Formidable Forms, depending on which plugin you’re using.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 177 Integrating Cloudflare with WPForms and Formidable Forms](https://cdn3.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-wpforms-formidableforms.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 178 Integrating Cloudflare with WPForms and Formidable Forms](https://cdn3.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-wpforms-formidableforms.png)
Simply click on either of these sections to expand.
To add the CAPTCHA to all your forms, just check the ‘Enable on all…’ box.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 179 Enabling CAPTCHA for WPForms](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/enabling-captcha-wpforms.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 180 Enabling CAPTCHA for WPForms](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/enabling-captcha-wpforms.png)
If you’re using a ‘Managed’ or ‘Non-interactive’ CAPTCHA, then you can change whether the loading and success animation appears before or after the form’s ‘Submit’ button.
In the following image, we’re using the ‘After button’ option.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 181 Changing where the CAPTCHA appears in WPForms](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-after-button.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 182 Changing where the CAPTCHA appears in WPForms](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-after-button.png)
To make this change, simply open the ‘Widget Location’ dropdown.
Then, choose either ‘Before Button’ or ‘After Button.’
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 183 Changing the location of the CAPTCHA widget](https://cdn2.wpbeginner.com/wp-content/uploads/2022/11/widget-location-cloudflare.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 184 Changing the location of the CAPTCHA widget](https://cdn2.wpbeginner.com/wp-content/uploads/2022/11/widget-location-cloudflare.png)
Some forms may not need a CAPTCHA. For example, you might disable the CAPTCHA for forms that aren’t getting many conversions, to see whether this improves your conversion rates. For more information, see our guide on WordPress conversion tracking made simple.
To remove the CAPTCHA, you’ll need to type the form’s ID into the ‘Disable Form IDs’ field.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 185 Removing the CAPTCHA from WPForms](https://cdn.wpbeginner.com/wp-content/uploads/2022/11/disable-form-ids.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 186 Removing the CAPTCHA from WPForms](https://cdn.wpbeginner.com/wp-content/uploads/2022/11/disable-form-ids.png)
If you’re using WPForms, then you can get this ID by going to WPForms » All Forms.
The ‘Shortcode’ column shows each form’s ID. For example, in the following image the form ID is 62.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 187 How to disable CAPTCHAs on your WordPress website](https://cdn3.wpbeginner.com/wp-content/uploads/2022/11/wpforms-form-id.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 188 How to disable CAPTCHAs on your WordPress website](https://cdn3.wpbeginner.com/wp-content/uploads/2022/11/wpforms-form-id.png)
If you’re a Formidable Forms user, then head over to Formidable » Forms instead.
On this screen, find the form that you want to exclude and make a note of the number in the ‘ID’ column.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 189 Forms, created using the Formidable Forms WordPress plugin](https://cdn3.wpbeginner.com/wp-content/uploads/2022/11/formidable-forms-id.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 190 Forms, created using the Formidable Forms WordPress plugin](https://cdn3.wpbeginner.com/wp-content/uploads/2022/11/formidable-forms-id.png)
You can now add these IDs to the ‘Disable Form IDs’ field.
To remove the CAPTCHA from multiple forms, simply separate each ID with a comma.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 191 Disabling the Cloudflare CAPTCHA for multiple forms](https://cdn2.wpbeginner.com/wp-content/uploads/2022/11/disabling-multiple-captchas.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 192 Disabling the Cloudflare CAPTCHA for multiple forms](https://cdn2.wpbeginner.com/wp-content/uploads/2022/11/disabling-multiple-captchas.png)
When you’re happy with how you’ve set up the integration, don’t forget to click on ‘Save Changes’ to store your settings.
Now if you visit any form created using Formidable Forms or WPForms, you’ll see the Cloudflare Turnstile CAPTCHA in action.
Bonus: Add Cloudflare Turnstile CAPTCHA to WooCommerce
Scripts and bots aren’t just bad news for WordPress blogs and websites. If you run an online store, then spambots and automated scripts might try to register with your store and place fake orders.
Every transaction comes with processing feeds, so fake orders can cost you a lot of money and make it difficult to grow your business.
The good news is that Cloudflare Turnstile also integrates with WooCommerce. This allows you to protect all your eCommerce pages including the WooCommerce login, signup, and checkout pages.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 193 The Cloudflare Turnstile CAPTCHA on the WooCommerce checkout page](https://cdn3.wpbeginner.com/wp-content/uploads/2022/11/woocommerce-checkout-captcha.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 194 The Cloudflare Turnstile CAPTCHA on the WooCommerce checkout page](https://cdn3.wpbeginner.com/wp-content/uploads/2022/11/woocommerce-checkout-captcha.png)
To add Cloudflare Turnstile to your WooCommerce pages, simply go to Settings » Cloudflare Turnstile.
Then, scroll to the ‘WooCommerce Forms’ section.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 195 Adding CAPTCHAs to your WooCommerce forms](https://cdn3.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-woocommerce-captcha.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 196 Adding CAPTCHAs to your WooCommerce forms](https://cdn3.wpbeginner.com/wp-content/uploads/2022/11/cloudflare-woocommerce-captcha.png)
If it isn’t already expanded, then click on this section.
You’ll now see all the WooCommerce pages where you can add a Cloudflare CAPTCHA. Simply check the box next to each page that you want to protect.
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 197 Protecting your WooCommerce store with a CAPTCHA](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/adding-captcha-woocommerce.png)
![How to Add Cloudflare Turnstile CAPTCHA in WordPress 198 Protecting your WooCommerce store with a CAPTCHA](https://cdn4.wpbeginner.com/wp-content/uploads/2022/11/adding-captcha-woocommerce.png)
After that, don’t forget to click on ‘Save Changes’ to store your settings. Now, if you visit any of your WooCommerce pages, you’ll see the Cloudflare Turnstile CAPTCHA.
We hope this article helped you learn how to add Cloudflare Turnstile CAPTCHA in WordPress. You can also go through our ultimate WordPress security guide and the best WordPress membership plugins.
If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.