Smart CAPTCHA Alternative with Cloudflare Turnstile
Smart CAPTCHA Alternative with Cloudflare Turnstile helps you block spam and bots without hurting user experience.
Instead of frustrating image puzzles or invasive tracking, this plugin integrates Cloudflare Turnstile, a modern CAPTCHA alternative that silently verifies real users while respecting privacy.
The plugin is lightweight, loads only when required, and performs server-side verification against Cloudflare’s API.
Supported Forms
WordPress: * Login Form * Registration Form * Password Reset Form * Comments Form
WooCommerce: * Checkout * Pay For Order * Login Form * Registration Form * Password Reset Form
Form Plugins: * Contact Form 7 * WPForms * Fluent Forms * Formidable Forms * Ninja Forms * Forminator Forms * Everest Forms * SureForms * Kadence Forms
Other Integrations: * MailPoet Forms * BuddyPress Registration Form * bbPress Create Topic & Reply Forms
Why Choose This Plugin: * Zero user friction — no puzzles or image challenges * Privacy-focused — respects user privacy while providing security * Performance optimized — scripts load only when forms are present * Currently free — no premium version, no hidden costs, no tracking * Server-side validation — secure verification through Cloudflare’s API
Features
The plugin includes several features and options:
- Easy Setup: Simple key configuration (Site Key & Secret Key)
- Per-Form Control: Toggle Turnstile on/off for each integration individually
- WooCommerce Options: Configurable placement options for checkout forms
- Customization:
- Theme selection (Auto/Light/Dark)
- Widget size controls (Normal/Compact/Flexible)
- Language settings
- Appearance mode (Always visible or interaction-only)
- Performance: Optional script defer for improved page load times
- Debugging: Debug logging to help troubleshoot form submission issues
Getting Started
Setting up Cloudflare Turnstile protection is straightforward:
- Create your Turnstile keys in the Cloudflare dashboard (Site Key and Secret Key)
- Navigate to Dashboard → Smart Cloudflare Turnstile in your WordPress admin
- Enter your keys and choose which forms to protect
- Save your settings — Turnstile will now appear on your selected forms
That’s it! Your forms are now protected from spam and bots.
Need help? Check our documentation or visit the support forum for detailed guides.
Plugin Languages
The plugin is currently available in English. If you’d like to help translate the plugin into your language, please visit our translation page.
Other Information
- For help & suggestions, please create a support topic in our support forum
- Follow the developer @mayankmajeji
- View on GitHub
Support The Plugin
Special thanks to all contributors who help support the continued development of this plugin.
The plugin is currently free to use. If you find it useful and would like to support its continued development, maintenance, and support, you can make a donation. Your support is greatly appreciated and helps keep the plugin actively maintained.
Trademark Notice
Cloudflare, the Cloudflare logo, and Cloudflare Workers are trademarks and/or registered trademarks of Cloudflare, Inc. in the United States and other jurisdictions.
This plugin is not affiliated with, endorsed by, or sponsored by Cloudflare, Inc. Cloudflare® and Turnstile® are trademarks of Cloudflare, Inc.
Third Party Services
This plugin connects to Cloudflare Turnstile service to provide CAPTCHA verification.
What data is transmitted: – Form submission tokens for verification – IP addresses for bot detection – Browser fingerprints for security analysis
When data is sent: – Only when users submit forms with Turnstile protection enabled – Data is sent securely via HTTPS to Cloudflare’s servers
External Services: – Cloudflare Turnstile API: https://developers.cloudflare.com/turnstile/ – Cloudflare Terms of Service: https://www.cloudflare.com/terms/ – Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/