Cloudflare Turnstile
Stop spam on every form without making real people solve puzzles. Completely free, forever.
Add Cloudflare Turnstile to your WordPress login, registration, comment, WooCommerce and contact forms in a couple of clicks. A privacy-first, invisible alternative to reCAPTCHA.
Turnstile everywhere
Protects the forms and plugins you already use
Spam protection your visitors never think about
Cloudflare Turnstile works out whether a visitor is a real person without asking them to identify traffic lights or type out blurry text. Paste in two keys, tick the forms you want protected, and failed submissions are rejected before they reach your inbox, your comments or your WooCommerce orders.
Add your keys
Generate a free site key and secret key in Cloudflare, then paste them into the settings.
Tick your forms
Pick the forms you want protected, from your login page to the WooCommerce checkout.
Visitors get verified
Turnstile runs quietly in the background. Most real people never have to click a thing.
Spam is stopped
Failed challenges are rejected server-side, before the submission is processed.
Every day dozens of fake purchases were being placed for inexpensive products on our website… This plugin stopped them cold.
Ed Bernd Jr.
Why Turnstile
A CAPTCHA that stays out of your customers’ way
Most CAPTCHAs make every visitor prove themselves in order to catch a small number of bots. Turnstile does the checking itself.
No puzzles
Visitors are not asked to identify crosswalks or read distorted text. Most of them just see a checkmark.
Privacy-preserving
Turnstile is built as a privacy-first alternative to reCAPTCHA, and this plugin adds no tracking of its own.
Lightweight
A small script, with an optional preconnect resource hint if you want it loading sooner.
Failsafe mode
If Cloudflare is ever unreachable, choose whether to let submissions through or fall back to reCAPTCHA.
Works with 2FA
Compatible with WordPress Multisite and with most two-factor authentication plugins.
Nothing to pay
The plugin is free with no PRO version, and Cloudflare Turnstile is a free service too.
The old way
- Customers squint at nine blurry squares
- Abandoned checkouts from a failed challenge
- Visitor data handed to an advertising company
With Turnstile
- Usually no clicks needed at all
- Bots fail the check and cannot submit
- No advertising profile built from your visitors
Integrations
Every form on your site, from one settings page
Twenty-five built-in integrations, all free. Tick the ones you use and Turnstile appears on those forms.
WordPress
4 core forms- Login Form
- Registration Form
- Password Reset Form
- Comments Form
WooCommerce
6 store forms- Checkout
- Pay For Order
- Account Details
- Login Form
- Registration Form
- Password Reset Form
Form plugins
WPForms
Fluent Forms
Contact Form 7
Gravity Forms
Formidable Forms
Forminator
Jetpack Forms
Kadence Forms
SureFormsMemberships, communities & more
Elementor Pro
Easy Digital Downloads
Paid Memberships Pro
MemberPress
Ultimate Member
WP-Members
WP User Manager
Mailchimp for WP
MailPoet
BuddyPress
bbPress
wpDiscuz
CheckoutWC
Sunshine Photo CartAlso tested and working with
And so much more
Options worth knowing about
Sensible defaults out of the box, with plenty to change when you need to. None of it is locked behind an upgrade.
Light or dark theme
Match the widget to your site with a light, dark or automatic theme.
Language control
Set the widget language yourself, and use the plugin in any of its 14 translations.
Appearance mode
Show the widget always, or only when a visitor actually needs to interact with it.
Disable submit button
Keep the submit button greyed out until the challenge has completed successfully.
Custom error message
Write your own wording for failed submissions instead of the default message.
Whitelisting
Skip Turnstile entirely for logged-in users, or for specific IP addresses you trust.
Preconnect resource hint
An optional performance hint so the Turnstile script starts loading a little sooner.
Failsafe mode
Decide what happens if Cloudflare is unreachable: allow submissions, or fall back to reCAPTCHA.
Debug logging
Log Turnstile submission events so you can see what happened when a submission fails.
Test your API response
A button in the settings confirms your keys are working.
Multisite ready
Works across a WordPress Multisite network, and alongside most two-factor plugins.
No tracking or upsells
The plugin adds no data tracking of its own, and there are no nag screens in the dashboard.
Loved by site owners
Protecting 200,000+ WordPress sites
“This plugin is leagues ahead of other Turnstile, reCAPTCHA, and native CAPTCHA solutions.”
“It integrates flawlessly with Contact Form 7, which for me is a huge plus.”
“Easy to configure, works reliably, and offers a very complete set of options.”
“Great plugin, easy to setup, simply just works. No pro or subscription nonsense.”
Watch it in action
Set-up guides from the WordPress community
Independent walkthroughs showing Turnstile going live on real WordPress sites — from first install to a working widget on your forms.
Made a video about the plugin? Let us know and we’ll add it here.
Pricing
It’s free, and there is no paid version.
There is no PRO version, no subscription and nothing held back for an upgrade. Cloudflare Turnstile is a free service too, so the whole setup costs nothing.
Everything is included in the free version
- All 25 form integrations
- WordPress & WooCommerce forms
- Light, dark & auto themes
- Appearance & language options
- Whitelist by user or IP
- Custom error messages
- Failsafe & reCAPTCHA fallback
- Debug logging
- Multisite & 2FA support
- Every future update
Elliot Sowersby
Founder & Lead Developer
Here to help
Questions? We’ve got you covered
Ask a Question
Got a question about the plugin, or a form you would like to see supported? Send us a message.
Contact Us →Setup Guide
Step-by-step instructions for generating your Cloudflare keys and turning on your first form.
Read the Guide →Support Forums
Free community support on WordPress.org, where the developer replies to topics too.
Go to Forums →Add Turnstile to your forms today
Join 200,000+ WordPress sites using Cloudflare Turnstile to keep spam off their forms. Free to download, and free to run.