How to add Cloudflare Turnstile plugin to WordPress site
CAPTCHA is a regular security feature that protects different functionalities like contacts forms and login. Cloudflare's Turnstile is a new alternative for a popular Google reCAPTCHA.
Setting up Turnstile
Setting up Cloudflare's Turnstile is made easy with Simple Cloudflare Turnstile plugin. To activate the service you only need a Cloudflare account and WordPress site to protect!
Generate Cloudflare keys
Login to Cloudflare and navigate to Turnstile from the menu. Click "Add Widget", after which you'll be able to fill in relevant information.
If your site already has a CATPCHA service you can follow Cloudflare's instructions for migration.
In widget settings you can set a unique name (Widget name). In "Add Hostnames" you get to add your site's domain in the list of hostnames. In the free version you can add up to 10 hostnames but keep in mind that the secret keys will same for all of them. After you have filled to required information you can create the widget. Site will update to show you the API keys so leave it open, you will need them later.
Installing and setting up Simple Cloudflare Turnstile plugin
From your WordPress dashboard navigate to Plugins > Add Plugin and write "Simple Cloudflare Turnstile" in the search bar. Once you find the correct plugin click "Install now" and "Active".
Plugin settings appear under "Settings" menu. In here you can add the API keys (Site Key and Secret Key) you got earlier from Cloudflare. Settings for Turnstile's visibility and other features can be found in drop down menus. Remember to save changes when you're ready.
When API keys are added for the first time or updated you're required to test the API response to make sure that all works as intended. Turnstile challenge will appear at the top of the plugin's settings page which after completion and clicking "TEST RESPONSE" you should get following response
Now Cloudflare's Turnstile should be working on the site. For example if you added it to WordPress login it will appear according to the settings in the login page.
