Protect your WordPress site's Comment section, Contact Forms, and WooCommerce with Cloudflare Turnstile.
We will give you step-by-step steps to install and say goodbye to Comments and Contact Form Spam.
Prerequisite - Before Starting
A) Set up a free Cloudflare Account; Register for an Account Here.
TIP1: if you own multiple WordPress sites, you can set up Turnstile in one Cloudflare account.
TIP 2: You do not have to use Cloudflare for DNS. However, we recommend it for the Free CDN and extra Security for your site
B) We recommend using the free Simple Cloudflare Turnstile WordPress plugin. Go ahead and install it on your WordPress site. We will use this plugin in this Tutorial.
Let's get Started!
[1] After adding the Simple Cloudflare Turnstile, you will need to head over to your new Cloudflare Account (or existing one if you have it) and locate Turnstile on the left Menu. Once you click on it, you will be taken to the 'Turnstile Sites' page (yes, you can have many sites here). Click the Add Site blue button.
[2] Give your site a name. To keep things simple, just use your site's domain name as the name.
[3] Domain - is the next step. If your site already uses Cloudflare DNS then the drop down will allow you to select that domain. Yes, if your site is a sub.domain.com you can set it up as well.
[4] Widget Mode - The next step. Select either Managed, Non-interactive, or Invisible. TIP: if you want to keep site visitor "friction down," go ahead and select 'Invisible'; the site visitor will never see any captcha prompts. If you do not like how it works, you can always come back and change it.
[5] The "Would you like to opt for pre-clearance for this site?" This basically provides a "clearance cookie" that is sort of like a free pass. Recommend 'NO' and I would encourage you to read more at Cloudflare if you wish to use it.
Now click the 'Create' button.
[6] Copy both your Site Key and Secret Key and add them to your site. You are finished with Cloudflare during this setup.
You should be logged into your Website now
[7] At the 'API Key Settings' of the plugin Simple Cloudflare Turnstile. Paste your Site Key in the Site Key field, and the Secret Key in your Secret Key field.
[8] General Settings - Select the (A) Theme darkness that best matches the theme of your site. You might have to try several settings to set it the way you like.
(B) Language - A lot of language choices are available. I would recommend leaving them on Auto Detect.
(C) Appearance Mode - I recommend selecting "Interaction Only."
(D) Disable Submit Button - This is a trick question; we do not wish to Disable the Turnstile challenge.
[9] Advance Settings
(A) Defer Scripts – Leave checked.
(B) Custom Error Message – Nothing to do, leave as is
(C) Extra Failure Message – Make sure to check. It could come in handy.
[10] Whitelist Settings - When users on your WordPress site will not see the Turnstile Challenge
(A) Logged-in Users – Default is unchecked; let's check this so logged-in users aren’t harassed.
(B) IP Addresses – Leave blank
(C) User Agents - Leave blank
PDF 6
f
