How do I set up Cloudflare Turnstile?

1. In Cloudflare open Turnstile and click Add widget manually. (Do not use Set up with Spin: it lets an AI agent change your website's code.)
2. Add your site's hostnames, for example example.com and www.example.com, choose Managed and create the widget.
3. Copy the Site Key and Secret Key.
4. In WHBMP open Settings > General Settings > Security, open Cloudflare Turnstile under Captcha Providers and paste both keys.
5. Click Test Connection, Save, then Activate. The badge must say Active.
6. In Captcha Policy choose when to ask and tick the forms to protect.
7. Check the client sign-in (/client/login) in a private window.

The admin sign-in never shows a CAPTCHA, by design. Full guide: Cloudflare Turnstile. If no box appears: The CAPTCHA widget is not showing.