The CAPTCHA widget is not showing

Check these, in order:

1. Is the provider active? Open Settings > General Settings > Security, open the provider under Captcha Providers and look at the badge. It must say Active. Saving the keys does not activate it: click Activate.
2. Are both keys saved? With the Site Key or the Secret Key missing, nothing is shown.
3. Is the form ticked? In Captcha Policy > Forms to Protect tick the form (for the sign-in, Client Sign-in and Forgot Password) and save.
4. Is protection on? Captcha Form Protection must be Always On or Off when logged in, not Always Off.
5. Are you signed in? With Off when logged in, a signed-in client or administrator never sees the box. Check in a private window.
6. Which page are you on? The admin sign-in is never protected, on purpose, so a wrong key cannot lock you out. The client sign-in is at /client/login.
7. The box spins and never finishes? The hostname you are visiting is missing from the widget's hostname list in your provider's dashboard (for Turnstile: Cloudflare > Turnstile > your widget > Hostnames), or the Site Key is wrong.

Step-by-step setup: Cloudflare Turnstile.