Cloudflare Turnstile Plugin Documentation

1. Getting Started: Cloudflare Turnstile by MountDev
2. Features

3. Installation

4. Where to get keys?

5. Configuration Guide

6. API Settings

7. General Settings

8. Advanced Settings
   
9. Supported Integrations
   

• Easy Integration: Quickly connect your site to Cloudflare Turnstile using API keys. No coding needed.

• Multi-Form Support: Automatically protects WordPress core forms: login, registration, password reset, and comment forms.

• Third-Party Plugin Integration:
  Built-in support for:

• WooCommerce (login, register, checkout)

• Contact Form 7

• Elementor Forms

• Fluent Forms

• Customizable Appearance & Behavior: Choose themes, widget size, interaction modes, custom messages, and more.

• Privacy-First: No personal data is collected. No user tracking. 100% compliant with privacy regulations.

• Responsive Design: The CAPTCHA widget adapts to all screen sizes, ensuring usability on mobile, tablet, and desktop devices.

1. Download and upload the 'Turnstile by MountDev' plugin.
2. Activate the plugin via the Plugins menu in WordPress.
3. Go to Settings > Cloudflare Turnstile
4. Enter your Cloudflare Turnstile Site Key and Secret Key
5. Choose which forms to protect and customize widget settings.

​​

Where to get keys? 

If you don’t already have a Cloudflare account, create one at https://dash.cloudflare.com.

1. Log in to your Cloudflare Dashboard.

2. In the sidebar, click Turnstile.

3. Click the “Add site” button.

4. Fill in the site details:

• Site Name – A label for your reference.

• Domain – The domain where Turnstile will be used (e.g., example.com).

• Widget Type – Choose one of the following:

• Managed (Recommended): Cloudflare intelligently decides whether to show a simple checkbox or pass the visitor silently.

• Non-interactive: Shows only a loading animation while checking in the background.

• Invisible: Fully hidden unless a challenge is triggered.

5. Click Create.

​

Configuration Guide

Once installed and activated, configure the plugin by navigating to:

Settings → Cloudflare Turnstile

 ​

• Site Key: Your public Turnstile site key from the Cloudflare dashboard.

• Secret Key: Your private Turnstile secret key. Keep this safe—never share it.

1. Enter your Site Key and Secret Key into the respective fields under the 'API Settings' section. At this stage, you may notice the status showing as 'Inactive'—this simply indicates that Cloudflare Turnstile has not been fully activated yet. Once the keys are validated and form protection is enabled, the status will update accordingly.

2. Navigate to the 'Test Configuration' tab and click the 'Test Credentials' button. This will validate your Site Key and Secret Key with Cloudflare and activate Turnstile protection if the credentials are correct.

3. Return to the 'API Settings' tab, and you should now see the status updated to 'Active', indicating that Cloudflare Turnstile has been successfully connected and is ready to protect your forms.

4. You can customize the Turnstile widget's appearance and behavior under the 'General Settings' and 'Advanced Settings' tabs.

5. In the 'Integrations' tab, once a supported plugin is installed (such as WooCommerce, Contact Form 7, or Elementor), corresponding options will appear, allowing you to enable Turnstile protection for those forms.

​​

General Settings  

• Form Integration: Select which WordPress forms you want to protect:

• Login

• Registration

• Password Reset

• Comment Forms

• WooCommerce (Login, Registration, Checkout)

• Contact Form 7

• Elementor Forms

• Fluent Forms

• Theme: Choose between:

• Light (default)

• Dark (for dark-themed sites)

• Language: Set a specific language or allow the widget to auto-detect based on browser settings.