Cloudflare Turnstile

Connects WHBMP to Cloudflare Turnstile, the bot-protection service. You enter your keys, test them, and make Cloudflare Turnstile the active CAPTCHA provider for this installation.

What it does today

• Cloudflare Turnstile is available as a CAPTCHA provider, and you can store its keys (they are saved encrypted).
• The code to check an answer with Cloudflare Turnstile's own service is included, ready for when forms use it.
• A Test Connection button checks your keys.
• Only one CAPTCHA provider is active at a time. Activating another switches the first off.

Not active on forms yet

WHBMP does not show the Cloudflare Turnstile widget on its sign-in, sign-up or other forms yet, so activating it does not protect them for now. Putting the widget on the forms and checking the answer there is planned.

Setting up

1. In the Cloudflare dashboard, open Turnstile, add your site and copy the Site Key and Secret Key.
2. In WHBMP, go to Settings > General > Security, enter both keys on the Cloudflare Turnstile card and press Test Connection.
3. Press Activate so it is ready when form protection is switched on.

Good to know

• Turnstile is free and mostly invisible to visitors. You do not need to use Cloudflare for your DNS.
• Keys are stored encrypted.