Spam protection

Cloudflare Turnstile in Core Forms

Modern, invisible-first CAPTCHA from Cloudflare — no tracking, no puzzles.

Bundled with Core Forms, the WordPress forms plugin with every premium feature in the box. No add-on tax.

Bundled, no add-on tax Unlimited sites Use code CFLAUNCH for 20% off either plan. Ends September 30, 2026 (IST).

Cloudflare Turnstile replaces the “I’m not a robot” checkbox with a passive challenge that runs in the background. Core Forms supports Turnstile natively — both managed and invisible modes — for sites that already use Cloudflare or want a privacy-first alternative.

What you get

How Cloudflare Turnstile works in Core Forms

Managed + invisible modes

Pick the mode that matches your form’s risk profile.

No tracking

Turnstile doesn’t profile users like reCAPTCHA does.

Free, unmetered

Cloudflare provides Turnstile free of charge for any traffic level.

Set it up

Connect Cloudflare Turnstile in 3 minutes

1

Register a Turnstile widget

Cloudflare dashboard → Turnstile → Add site.
2

Paste the keys

Settings → Turnstile, paste site key and secret.
3

Pick a mode

Managed (visible badge) or Invisible (silent).

Want the long version? Read the step-by-step guide with screenshots of every setting.

Pairs well with

Related integrations

reCAPTCHA v3

Google reCAPTCHA v3 with per-form score thresholds and invisible challenges.

hCaptcha

Privacy-friendly, GDPR-aware spam protection as a reCAPTCHA alternative.

Akismet

Automattic Akismet spam filtering with configurable whitelist keywords.

Browse all integrations →

Bundled with every Core Forms license.

Cloudflare Turnstile and every Core Forms-built integration on this site are included with your license. Use code CFLAUNCH for 20% off either plan. Ends September 30, 2026 (IST).

Get Lifetime — $249 Yearly — $59/yr