Cloudflare Turnstile

A CAPTCHA replacement that checks a visitor without setting a puzzle.

Made by CloudflareBot and automation defense

Visit developers.cloudflare.com

About Cloudflare Turnstile

Cloudflare describes Turnstile as its smart CAPTCHA alternative. Turnstile performs client-side security challenges on behalf of the website operator to distinguish human visitors from automated traffic.

Turnstile can be embedded into any website without sending traffic through Cloudflare and works without showing visitors a CAPTCHA. Turnstile is WCAG 2.2 AA compliant. Turnstile does not access, store, or transmit user communications, form entries, or other page inputs.

Drafted from developers.cloudflare.com · not yet confirmed by Cloudflare

How it works

Turnstile is Cloudflare's CAPTCHA replacement. You embed a widget that runs a series of non intrusive browser checks (proof of work, JavaScript challenges, signals from Cloudflare's network) and issues a token, which you validate server side. Most visitors never see an interactive puzzle. It works on any site, not only ones behind Cloudflare, and it's free without limits.

What it doesn't do is give you a rich risk score or device ID; it's a pass or fail gate. For account level abuse you'll pair it with something else.

  • From the company

Cloudflare Turnstile, from its website
From the company

Reviews

Be the first to review it

Anonymous
Would you use it again?

Signed as your field and level, never your name.

Know a team weighing Cloudflare Turnstile? Send them this page.