What is Cloudflare Turnstile?

Cloudflare Turnstile is a free, user-friendly tool that verifies whether someone is human without the hassle of complex CAPTCHAs. It uses behind-the-scenes checks to identify real users, so your site visitors get a smooth experience.

Set up Turnstile

These steps generate the keys you need to use Cloudflare Turnstile's CAPTCHA service and add them to Formidable.

1. Go to Cloudflare Turnstile and click the Start building for free button to use the free plan.
   

   

2. Get a free key to use Cloudflare Turnstile. You must create a Cloudflare account by entering your email address and password.
   

   

3. After you create an account, you'll be redirected to the Cloudflare dashboard, where you set up the widget for your site. You'll need to generate a unique pair of keys: a site key and a secret key. In the sidebar, go to Application security → Turnstile (1). Then click Add widget manually (2) to open the Add Widget page.
   

   

4. Enter a Widget name (1) to identify the widget later. Then, under Hostnames, type your site's domain and click Add “yoursite.com” as a custom hostname (2). Pressing Enter doesn't add it. A local test site's hostname, such as mysite.local, works too.
   

   

5. Choose how the Turnstile challenge appears to users. Select the widget mode you want to use on your forms: Managed, Non-interactive, or Invisible. If you're not sure, keep Managed. It's selected by default, and Cloudflare recommends it. Read more on the different Turnstile widget types.
   

   

6. Choose whether to turn on Skip future security rule challenges for verified visitors. This pre-clearance option only works if your site is proxied through Cloudflare, so leave it off otherwise. Read more on implementing Pre-clearance support. Then click Create to add the widget.
   

   

7. Cloudflare creates the widget and shows its Site key and Secret key under Integrate the widget yourself. Click a key to copy it. You'll add these keys to Formidable in the next step.
   

   

8. Go back to your site and go to Formidable → Global Settings → Captcha/Spam. Under Select captcha type, click Turnstile. Then, in the Turnstile settings section, paste your keys into the Site key and Secret key boxes.
   

   

   
   Changing the captcha type replaces it in every form that uses a captcha. The Turnstile settings section stays open until both keys are saved. After that, click Turnstile settings to view or change your keys.
9. Click Update to save your changes.
10. Add Turnstile to your form for enhanced spam protection. In the form builder, click Captcha on the Add Fields tab. The new Captcha field shows the Turnstile box. If you are building a multi-paged form, insert the Captcha field on the last page.
    

    

11. Click Update to save your changes. The Captcha field doesn't appear on your live form until you save it.

How to disable Turnstile

Delete the Captcha field from the form builder page to disable Turnstile CAPTCHA. Alternatively, you can visit the Formidable → Global Settings → Captcha/Spam page and remove the Turnstile keys.

Troubleshooting

The CAPTCHA on this form is not set up correctly. Please contact the site administrator.

This message means Cloudflare reported a problem with your Turnstile settings rather than with the visitor, such as a missing or invalid secret key. Enter your site key and secret key again. Both keys must come from the same Turnstile widget.