Cloudflare Turnstile

2 min read Updated

The Cloudflare Turnstile addon adds a Cloudflare Turnstile check to the SiteOrigin Contact Form widget. Turnstile is a free CAPTCHA alternative from Cloudflare. It checks that a person sends the form, and most visitors don’t have to solve a puzzle. For the widget’s other settings, see the Contact Form widget documentation.

Requirements

Go to SiteOriginPremium Addons and activate Cloudflare Turnstile. This also activates the Contact Form widget.

Get Your Keys From Cloudflare

The addon needs a Site Key and a Secret Key.

  1. Log in to the Cloudflare dashboard.
  2. Open Turnstile and add a widget.
  3. Add the domain of your WordPress site.
  4. Save the widget. Cloudflare shows the Site Key and the Secret Key.

For more help, see Cloudflare’s guide: Get started with Turnstile.

Add Turnstile to a Contact Form

  1. Edit a SiteOrigin Contact Form widget.
  2. Open the Spam Protection section.
  3. Open the Cloudflare Turnstile section.
  4. Turn on Cloudflare Turnstile.
  5. Paste your Site Key and Secret Key.
  6. Save the widget.

The Spam Protection section of the Contact Form widget with Cloudflare Turnstile turned on and test keys entered

Cloudflare Turnstile
Turns the Turnstile check on for this form. Default: off.

Site Key
The public key from Cloudflare. Shows when Cloudflare Turnstile is on.

Secret Key
The private key from Cloudflare. The site uses it to confirm each check with Cloudflare. Shows when Cloudflare Turnstile is on.

The keys are saved in each Contact Form widget. To use Turnstile on more than one form, enter the keys in each form. The check runs only when Cloudflare Turnstile is on and both keys are set.

How It Works

  • The Turnstile check shows below the form fields, above the submit button.
  • When a visitor sends the form, your site sends the Turnstile answer to Cloudflare to confirm it.
  • If the visitor didn’t complete the check, or Cloudflare rejects the answer, the form doesn’t send the message. It shows “Error validating your response. Please try again.” above the fields.
  • The addon has no display settings. The look and the type of challenge come from your widget settings in Cloudflare.
  • You can use Turnstile with the other options in Spam Protection, such as Honeypot, Browser Check and Akismet. The Turnstile check runs after the form passes its other checks.