Cloudflare Turnstile
Stop Bots.
Not People.
Cloudflare Turnstile for WordPress
Privacy-friendly CAPTCHA that protects your WordPress forms silently — no annoying puzzles, no reCAPTCHA dependency.
Registration Form
Comment Spam Blocked
Contact Form 7
GDPR Friendly
Invisible Mode
No Google Tracking
WordPress.org Approved
Clean Uninstall
Login Form Protection
Registration Form
Comment Spam Blocked
Contact Form 7
GDPR Friendly
Invisible Mode
No Google Tracking
WordPress.org Approved
Clean Uninstall
Up and running in 3 minutes
No coding required. Install, paste two keys, done.
Install the Plugin
Download from WordPress.org and activate via your Plugins screen. No FTP needed.
Get Cloudflare Keys
Create a free Turnstile widget at dash.cloudflare.com. Copy your Site Key and Secret Key.
Paste Keys & Save
Go to Settings → Cybernob Turnstile. Paste both keys. The live status checker confirms it instantly.
You’re Protected
Turnstile automatically appears on all forms. Bots blocked. Real users sail through without friction.
Every form, protected
Automatic protection across all the forms bots love to abuse.
Login Form
Blocks brute-force and credential-stuffing attacks on wp-login.php
Registration Form
Prevents automated fake account creation on your site
Comment Form
Stops comment spam dead — no Akismet subscription needed
Contact Form 7
Automatically protects every CF7 form — zero extra configuration
Everything you need.
Nothing you don’t.
Built to WordPress.org coding standards. Lightweight. Production-ready.
Live Status Checker
The settings page shows instantly whether your API keys are valid and Cloudflare is reachable.
Invisible Mode
Widget stays completely hidden. Form auto-submits once the challenge passes silently in the background.
3 Widget Themes
Auto (follows system preference), Light, and Dark. Matches your site’s design perfectly.
GDPR Friendly
No cookies set by default. No Google tracking. No cross-site surveillance. Privacy-preserving by design.
Translation Ready
All strings wrapped in i18n functions with the correct text domain. Ready for any language.
Clean Uninstall
All data removed completely on deletion. Multisite-aware. Zero footprint on your database.
Turnstile vs reCAPTCHA
Not all CAPTCHAs are equal. Here’s why Turnstile wins.
| Feature | Turnstile (This Plugin) | reCAPTCHA v2 | reCAPTCHA v3 |
|---|---|---|---|
| Privacy Friendly | ✔ Yes | ✘ No | ✘ No |
| No Puzzles for Users | ✔ Yes | ✘ Sometimes | ✔ Yes |
| No Google Tracking | ✔ Yes | ✘ No | ✘ No |
| GDPR Compliant | ✔ Yes | ⚠️ Debated | ⚠️ Debated |
| Free to Use | ✔ Yes | ✔ Yes | ✔ Yes |
| No Cookies by Default | ✔ Yes | ✘ No | ✘ No |
Common questions
Secure your WordPress site today.
Stop spam. Block bots. Keep your users happy.
Free forever. No account needed beyond Cloudflare.
Cloudflare Turnstile is a trademark of Cloudflare, Inc. This plugin is not affiliated with or endorsed by Cloudflare.
