Smart CAPTCHA Alternative with Cloudflare Turnstile helps you block spam and bots without hurting user experience.

Instead of frustrating image puzzles or invasive tracking, this plugin integrates Cloudflare Turnstile, a modern CAPTCHA alternative that silently verifies real users while respecting privacy.

The plugin is lightweight, loads only when required, and performs server-side verification against Cloudflare’s API.

Supported Forms

WordPress:
* Login Form
* Registration Form
* Password Reset Form
* Comments Form

WooCommerce:
* Checkout
* Pay For Order
* Login Form
* Registration Form
* Password Reset Form

Form Plugins:
* Contact Form 7
* WPForms
* Fluent Forms
* Formidable Forms
* Ninja Forms
* Forminator Forms
* Everest Forms
* SureForms
* Kadence Forms

Other Integrations:
* MailPoet Forms
* BuddyPress Registration Form
* bbPress Create Topic & Reply Forms

Why Choose This Plugin:
* Zero user friction — no puzzles or image challenges
* Privacy-focused — respects user privacy while providing security
* Performance optimized — scripts load only when forms are present
* Currently free — no premium version, no hidden costs, no tracking
* Server-side validation — secure verification through Cloudflare’s API

Features

The plugin includes several features and options:

Easy Setup: Simple key configuration (Site Key & Secret Key)
Per-Form Control: Toggle Turnstile on/off for each integration individually
WooCommerce Options: Configurable placement options for checkout forms
Customization:
- Theme selection (Auto/Light/Dark)
- Widget size controls (Normal/Compact/Flexible)
- Language settings
- Appearance mode (Always visible or interaction-only)
Performance: Optional script defer for improved page load times
Debugging: Debug logging to help troubleshoot form submission issues

Getting Started

Setting up Cloudflare Turnstile protection is straightforward:

Create your Turnstile keys in the Cloudflare dashboard (Site Key and Secret Key)
Navigate to Dashboard Smart Cloudflare Turnstile in your WordPress admin
Enter your keys and choose which forms to protect
Save your settings — Turnstile will now appear on your selected forms

That’s it! Your forms are now protected from spam and bots.

Need help? Check our documentation or visit the support forum for detailed guides.

Plugin Languages

The plugin is currently available in English. If you’d like to help translate the plugin into your language, please visit our translation page.

Other Information

For help & suggestions, please create a support topic in our support forum
Follow the developer @mayankmajeji
View on GitHub

Support The Plugin

Special thanks to all contributors who help support the continued development of this plugin.

The plugin is currently free to use. If you find it useful and would like to support its continued development, maintenance, and support, you can make a donation. Your support is greatly appreciated and helps keep the plugin actively maintained.

Make a donation

Trademark Notice

Cloudflare, the Cloudflare logo, and Cloudflare Workers are trademarks and/or registered trademarks of Cloudflare, Inc. in the United States and other jurisdictions.

This plugin is not affiliated with, endorsed by, or sponsored by Cloudflare, Inc. Cloudflare® and Turnstile® are trademarks of Cloudflare, Inc.

Third Party Services

This plugin connects to Cloudflare Turnstile service to provide CAPTCHA verification.

What data is transmitted:
– Form submission tokens for verification
– IP addresses for bot detection
– Browser fingerprints for security analysis

When data is sent:
– Only when users submit forms with Turnstile protection enabled
– Data is sent securely via HTTPS to Cloudflare’s servers

External Services:
– Cloudflare Turnstile API: https://developers.cloudflare.com/turnstile/
– Cloudflare Terms of Service: https://www.cloudflare.com/terms/
– Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/