Alexandre Alves

This plugin adds <a href="https://www.cloudflare.com/products/turnstile/" rel="nofollow ugc">Cloudflare Turnstile</a> — a free, privacy-friendly CAPTCHA alternative — to your WordPress site.
Its key difference from other Turnstile plugins is per-form control for Elementor Pro: instead of toggling Turnstile globally for every Elementor form, you add a “Cloudflare Turnstile” field to the specific forms you want to protect, exactly like Elementor’s built-in reCAPTCHA field. Forms without the field are left untouched. If you prefer the all-at-once approach, an optional setting protects every Elementor Pro form automatically.
<h4>Features</h4>
<ul>
<li>Per-form Turnstile field for Elementor Pro Forms — drag it into the forms you choose.</li>
<li>Optional “all Elementor Pro forms” switch — protect every Elementor Pro form at once, without adding the field to each one (off by default).</li>
<li>Optional protection for the built-in WordPress forms:
<ul>
<li>Login</li>
<li>Registration</li>
<li>Lost password</li>
<li>Comments</li>
</ul>
</li>
<li>One-click import of keys and settings from the “Simple Cloudflare Turnstile” plugin (no need to recreate your Cloudflare keys).</li>
<li>Global widget appearance settings (theme, size, visibility, language).</li>
<li>Strict server-side token verification (single-use tokens, 5-minute validity).</li>
<li>Secure-by-default behaviour: missing/invalid tokens are always blocked; the 
behaviour when Cloudflare itself is unreachable is configurable.</li>
<li>Write-only secret key (never displayed or sent to the browser).</li>
<li>Lightweight: in the default per-form mode, the Cloudflare script loads only on pages that actually show a widget. (The optional “all forms” mode loads it across the front end so late-loaded forms are covered.)</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>The Elementor field requires Elementor Pro (the Forms widget is a Pro feature). Without Elementor Pro, the WordPress form integrations still work.</li>
<li>A free Cloudflare Turnstile site key and secret key.</li>
</ul>
<h4>Third-party service</h4>
This plugin renders the official Cloudflare Turnstile widget and verifies tokens with Cloudflare.
<ul>
<li>When a protected form is displayed, the visitor’s browser loads <code>https://challenges.cloudflare.com/turnstile/v0/api.js</code> from Cloudflare.</li>
<li>
When a protected form is submitted, your server sends a request to <code>https://challenges.cloudflare.com/turnstile/v0/siteverify</code> containing: the Turnstile token from the widget (<code>cf-turnstile-response</code>), your secret key, and — unless disabled with the <code>cwebts_remoteip</code> filter — the visitor’s IP address (<code>REMOTE_ADDR</code>). The secret key is never sent to the browser.
</li>
<li>
Cloudflare Turnstile: https://www.cloudflare.com/products/turnstile/
</li>
<li>Terms of Service: https://www.cloudflare.com/website-terms/</li>
<li>Privacy Policy: https://www.cloudflare.com/privacypolicy/</li>
</ul>
<h4>About the name</h4>
The distinctive part of the name is CWeb Form Protection, after Collectif WEB, the agency that maintains this plugin. The trailing “with Turnstile for Elementor Forms” only describes what the plugin integrates with: “Turnstile” is the Cloudflare service it uses, and “for Elementor Forms” signals compatibility with Elementor’s Forms widget. This plugin is not affiliated with, sponsored by, or endorsed by Cloudflare, Inc. or Elementor Ltd.
<h4>Trademarks</h4>
Not affiliated with Cloudflare, Inc. or Elementor Ltd. “Cloudflare” and “Turnstile” are trademarks of Cloudflare, Inc. “Elementor” is a trademark of Elementor Ltd. These names are used only to describe compatibility.

CWeb Form Protection with Turnstile for Elementor Forms

Add Cloudflare Turnstile to your forms — with a per-form field for Elementor Pro so you choose exactly which forms are protected.

azizultex

WPPOOL

Md. Al-Shahreyar

wpdarkmode

Mahafuz

Md Sajjadul Islam

farhanmullick

Cloudflare Turnstile for WordPress, WooCommerce, Contact Form 7, BuddyPress, WPForms, and more. Secure your WordPress website with the best reCAPTCHA alternative for WordPress.
“Studies show that 15% of users will abandon a web-based service when they face a traditional CAPTCHA test.”
HOW TO ADD CLOUDFLARE TURNSTILE IN WORDPRESS
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/2jU2LhkiQQU?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
PROTECTS AGAINST SPAM FOR:
<ul>
<li>WordPress Login form</li>
<li>WordPress Signup form</li>
<li>WordPress Reset Password form</li>
<li>WordPress Comment form</li>
<li>WooCommerce forms</li>
<li>Contact Form 7 forms</li>
<li>WPForms contact forms</li>
<li>BuddyPress forms</li>
<li>Elementor forms</li>
</ul>
Say to no user experience nightmare, known as CAPTCHA. It hinders your website experience significantly as it slows down user actions at every step of the website journey. Welcome to Turnstile, the latest alternative to invisible CAPTCHA and honeypot. This anti-spam plugin allows you to easily integrate Turnstile on your website within a few seconds without any coding.
<a href="https://wordpress.org/support/plugin/wppool-turnstile-captcha-spam-filter/" rel="ugc">👩🏼‍💻 Get support</a>
WHAT IS CLOUDFLARE TURNSTILE, AND HOW TO ACTIVATE IT ON YOUR WEBSITE?
Turnstile is the latest privacy-focused invisible CAPTCHA technology developed by Cloudflare to create a modern CAPTCHA alternative and reCAPTCHA alternative.
Turnstile helps you identify real website visitors without needing additional actions. Instead, Turnstile automatically runs a series of small non-interactive JavaScript challenges based on telemetry and client behavior displayed during a session. That means the possibility of your users facing CAPTCHA will reduce significantly. <a href="https://www.cloudflare.com/en-gb/products/turnstile/" rel="nofollow ugc">Learn more about Turnstile</a>
Getting started with Turnstile on WordPress is super easy. All you have to do is install and activate our plugin. Then, generate your site and secret keys from Cloudflare (a free and easy process) and input them through the provided field. That’s it. The plugin does everything else and ready to protect your forms from spam. You will no longer have to get frustrated with the poor efficacy of reCAPTCHA ever again!
<a href="https://wordpress.org/support/plugin/wppool-turnstile-captcha-spam-filter/" rel="ugc">👩🏼‍💻 Get support</a>
<h3>EASY SPAM FILTER FEATURES</h3>
<ol>
<li>Automatic deployment: Once you setup Easy Spam Filter with your site key and secret key, the plugin does the rest. It will automatically deploy the required HTML snippet in your website for you.</li>
<li>WordPress spam protection: Spam Filter with Turnstile safeguards your website against spam comments or brute force attacks. It has support for every kind of WordPress form, including
<ul>
<li>Signup/registration form spam protection</li>
<li>Login form spam protection</li>
<li>Reset password form spam protection</li>
<li>Comment spam protection</li>
</ul>
</li>
<li>Disable/enable WordPress login spam protection: You can disable Turnstile at any time from the WordPress login form from the plugin setting.</li>
<li>SEO boost: Spambots often include low-quality or malicious outbound links, risking your website’s ranking. Turnstile prevents these bots from spamming and ensures you continue receiving a good ranking.</li>
<li>Mobile-friendly Anti Spam: Our Turnstile integration is fully optimized for mobile devices and will not break under any circumstances.</li>
<li>WooCommerce spam protection: Protect your WooCommerce store against malicious spam attacks. This reCAPTCHA alternative for WooCommerce provides protection against every kind WooCommerce form.
<ul>
<li>Signup/registration form spam protection</li>
<li>Login form – my account spam protection</li>
<li>Lost/Reset password form spam protection</li>
<li>Checkout billing form spam protection</li>
</ul>
</li>
<li>Contact Form 7 spam protection: Experience flawless Turnstile integration for Contact Form 7 forms. Protect your CF7 forms from spam comments. After configuration, add Turnstile to any Contact Form 7 form.</li>
<li>BuddyPress login spam protection: Keep your BuddyPress groups safe with secured spam protection by Cloudflare Turnstile antispam filter.</li>
<li>WPForms spam protection: Add Cloudflare Turnstile in Contact Form by WPForms and keep your everyday contact forms safe from spam submissions. Activate and enjoy
<ul>
<li>Contact forms spam protection</li>
<li>Payment forms spam protection</li>
<li>Survey forms spam protection</li>
<li>Newsletter forms spam protection</li>
<li>Registration forms spam protection</li>
</ul>
</li>
<li>Elementor forms spam protection: Add Turnstile to Elementor forms. If you are using Elementor Pro, you can now protect your
<ul>
<li>Elementor contact us forms</li>
<li>Elementor multi-step forms</li>
<li>Elementor login form</li>
</ul>
</li>
<li>Turnstile widget theme: Change the outlook of the Turnstile widget according to your wish (Dark or Light).</li>
<li>Submit button restriction: Control whether users need to pass the Cloudflare Turnstile security check to submit the button.</li>
<li>Custom message: Customize the Turnstile widget message and replace the default one (“Please verify you are human”).</li>
</ol>
<h3>Privacy Policy</h3>
Easy Spam Filter uses <a href="https://appsero.com" rel="nofollow ugc">Appsero</a> SDK to collect some telemetry data upon user’s confirmation. This helps us to troubleshoot problems faster & make product improvements.
Appsero SDK does not gather any data by default. The SDK only starts gathering basic telemetry data when a user allows it via the admin notice. We collect the data to ensure a great user experience for all our users.
Integrating Appsero SDK DOES NOT IMMEDIATELY start gathering data, without confirmation from users in any case.
Learn more about how <a href="https://appsero.com/privacy-policy/" rel="nofollow ugc">Appsero collects and uses this data</a>.

Easy Spam Filter – Privacy-Friendly CAPTCHA Alternative with Turnstile for Contact Form 7, WPForms, BuddyPress, Elementor

That’s awesome! Integrated CloudFlare Turnstile in my WordPress site in just a few minutes :wink: very lightweight and easy. Thanks for the plugin.

Very lightweight Turnstile WordPress plugin

Very helpful !

Add Cloudflare Turnstile to WordPress, Contact Form 7, WooCommerce, WPForms, BuddyPress & Elementor. A CAPTCHA, reCAPTCHA alternative for WordPress.

CWeb Form Protection with Turnstile for Elementor Forms vs Easy Spam Filter – Privacy-Friendly CAPTCHA Alternative with Turnstile for Contact Form 7, WPForms, BuddyPress, Elementor