How to Install & Add Cloudflare Turnstile CAPTCHA in WordPress Website For Free?

In this article, we will show you a tutorial on how to install and add Cloudflare Turnstile CAPTCHA to your WordPress site for free

By Larissa Lopes
Updated on February 23, 2023
How to Install & Add Cloudflare Turnstile CAPTCHA in WordPress Website For Free?

Turnstile is an alternative to the ubiquitous CAPTCHA forms used on 98% of websites. This new tool achieves the same goal of protecting you from spam without intrusive puzzle-solving and sending your data to Google. In this article, we will show you a tutorial on how to install and add Cloudflare Turnstile CAPTCHA to your WordPress site for free.

CAPTCHA can stop spambots, but they are also unpopular with visitors. Using non-intrusive technology like Turnstile, you can protect your site from spambots and automated scripts without disturbing visitors.

Why add Cloudflare Turnstile CAPTCHA in WordPress?

Spam is a huge problem for all websites, including WordPress. Spambots can use unsecured forms to send spam links, making lead generation difficult.

They may also try to hack your site’s login form using brute force attacks or flooding your site with spam comments that will hurt your visitor experience and your WordPress SEO. Automated scripts can even place fraudulent orders if you run an online store.

With that said, Cloudflare introduced the Turnstile CAPTCHA. That alternative technique uses non-intrusive task selection, usually done invisibly in the browser. So this allows you to secure your site without asking visitors to complete complex puzzles.

With that in mind, let’s take a look at how to add and install Cloudflare Turnstile CAPTCHA in WordPress.

Install a WordPress Cloudflare CAPTCHA Plugin

The easiest way to add Cloudflare CAPTCHA to WordPress is with Simple Cloudflare Turnstile. This free plugin allows you to connect your website to the Turnstile service so that it can properly respond to your requests.

First, you will need to install and activate the plugin.

Upon activation, go to Settings – Cloudflare Turnstile.

Adding a Site Key and Secret Key to a WordPress Site
The plugin will ask you to provide a website key and secret. You can get them for free by clicking on the link next to ‘You can get your website key and secret here.’

Get the Site Secret and Site key

The link takes you to the Cloudflare login page, where you can register your domain and create a site key and secret. It’s free, but you’ll need to create a Cloudflare account with your email address if you haven’t already.

After logging into the Cloudflare dashboard, find ‘Turnstile’ in the left menu and click on it. A screen appears with basic information about Cloudflare Turnstile.

If you want to continue, click the ‘Add Site’ button. On this screen, start typing a ‘Site Name.’ This is just for reference, so you can use whatever you like.

Then enter your website’s domain name in the ‘Domain’ field.

In the next step of this tutorial on how to install and add Cloudflare Turnstile CAPTCHA to your WordPress site for free, select the captcha widget to create. The first choice is Managed, which is the recommended way by Cloudflare. This is where Cloudflare analyzes browser requests and decides which challenge to run. At the same time, the visitor sees the loading animation.

Cloudflare will attempt to run a non-interactive challenge in the background, so visitors don’t need to do anything.

If the browser passes the test, the user sees a success message.

Turnstile CAPTCHA WordPress Free

Sometimes Cloudflare may decide it is safer to present an interactive challenge. However, visitors only need to check a box instead of solving a puzzle, so it’s still easier than traditional puzzle-based captchas.

Unless you have a specific reason not to, it is recommended to use hosted captchas, as this provides a good level of security with minimal impact on the visitor experience.

Don’t want to use interactive challenges on your WordPress site? Then you can choose ‘Non-interactive’ or ‘Invisible.’

Non-interactive challenges run in the browser, so visitors don’t need to take any action. However, as with hosted captchas, visitors will see a loading animation and a “success” message when the challenge is complete.

If you select Invisible, visitors will not see the success animation or message. This setting allows you to completely hide the captcha from your visitors, which avoids confusion and adds clutter to your WordPress theme.

Once you’ve made your decision, click the ‘Create’ button. Once you do that, Cloudflare will show you the site key and secret key. Now you can add this information to the settings.

Add Cloudflare Turnstile WordPress

In your WordPress dashboard, go back to Settings » Cloudflare Turnstile. Now you can add the ‘Site Key’ and ‘Site Secret’ to your WordPress dashboard.

After that, you can customize what the CAPTCHA looks like on your website and how it works. To start, you can open the ‘Theme’ drop-down menu and choose between light, dark or automatic.

Cloudflare Turnstile default shows visitors a ‘Verify you are human’ message. You should change that. For example, you can briefly explain why the CAPTCHA is so important or that it will only take a few seconds to complete.

To add your text, type it into the ‘Custom Error Message’ field. After that, you can select the forms in which you will use the Cloudflare Turnstile CAPTCHA.

The options displayed may vary depending on the plugins installed, but you can use Turnstile with all WordPress built-in forms by default. This includes the login page, user registration form, and password reset page.

Once satisfied with the information entered, scroll to the bottom of the screen and click on ‘Save Changes.’

Now, if you visit your website, you will see the turnstile CAPTCHA in action.

Final Words

We hope that the tutorial in this article has helped you learn how to install and add Cloudflare Turnstile CAPTCHA to your WordPress site for free. Leave your questions or opinions in the comment box below!