Ohm·Tang

OhmTang CFT is a comprehensive WordPress security plugin that seamlessly integrates Cloudflare Turnstile’s advanced CAPTCHA protection into your website. Say goodbye to traditional annoying CAPTCHAs and embrace a frictionless, privacy-focused security solution that effectively blocks bots while providing a smooth user experience. Completely free Cloudflare Turnstile integration for WordPress and WooCommerce – no premium features, no hidden costs, just powerful spam protection.
📢 DISCLAIMER: Trademarks and brands are the property of their respective owners.
<h4>🎛️ Granular Form Control</h4>
Individual Form Toggle and Each verification form supports custom error messages, allowing you to personalize the display when users fail the Turnstile challenge.- Complete Flexibility
Take full control over your security implementation with our granular form management system:
<ul>
<li>Per-Form Enable/Disable – Every supported form can be individually activated or deactivated</li>
<li>WordPress Core Forms:
<ul>
<li>✅ Login Form – Toggle on/off</li>
<li>✅ Registration Form – Toggle on/off </li>
<li>✅ Lost Password Form – Toggle on/off</li>
<li>✅ Comment Form – Toggle on/off ( on/off login or no login user)</li>
</ul>
</li>
<li>WooCommerce Forms:
<ul>
<li>✅ Login Form – Toggle on/off</li>
<li>✅ Registration Form – Toggle on/off</li>
<li>✅ Lost Password Form – Toggle on/off</li>
<li>✅ Checkout Form (Support Full site editting Block Checkout page and Traditional Checkout page) – Toggle on/off ( on/off login or no login user)</li>
</ul>
</li>
</ul>
<h4>🎯 Smart Conditional Protection</h4>
Intelligent Verification Based on User Status
Advanced conditional protection for better user experience:
<ul>
<li>
Checkout Page Smart Settings:
<ul>
<li>🔄 Option to skip verification for logged-in users – Provide seamless checkout experience for returning customers</li>
<li>🔒 Always protect guest checkouts – Secure anonymous transactions</li>
<li>⚡ Reduce friction for trusted customers while maintaining security</li>
</ul>
</li>
<li>
Comment Form Intelligent Protection:
<ul>
<li>🔄 Toggle verification for logged-in users – Choose whether authenticated users need CAPTCHA</li>
<li>🛡️ Always protect guest comments – Prevent spam from anonymous visitors</li>
<li>📝 Respect trusted commenters – Regular commentators can enjoy streamlined experience</li>
</ul>
</li>
<li>
Flexible User-Based Rules:
<ul>
<li>🎪 Customize protection based on user roles and status</li>
<li>🔐 Balance security and usability intelligently</li>
<li>📊 Reduce unnecessary verification for trusted users</li>
</ul>
</li>
</ul>
<h4>🛡️ Complete WordPress Core Protection</h4>
Protect every aspect of your WordPress site with comprehensive form security:
<ul>
<li>Login Security – Prevent brute force attacks on wp-login.php and admin areas (toggleable)</li>
<li>User Registration – Stop spam registrations and fake account creation (toggleable)</li>
<li>Comment Moderation – Eliminate spam comments automatically with smart user detection</li>
<li>Password Recovery – Secure lost password forms against abuse (toggleable)</li>
<li>Contact Forms – Compatible with popular contact form plugins</li>
<li>Your favorite Contact Forms – If you need to integrate your preferred form, contact me: ohmtang@outlook.com</li>
</ul>
<h4>🛒 Advanced WooCommerce Integration</h4>
Secure your online store and protect your revenue with dedicated WooCommerce protection:
<ul>
<li>Checkout Security – Prevent fraudulent orders and fake transactions with smart user detection</li>
<li>Customer Registration – Ensure genuine customer accounts (toggleable)</li>
<li>Guest Checkout – Protect checkout process for all users with conditional logic</li>
<li>Login Forms – Secure customer login and authentication (toggleable)</li>
<li>Review Systems – Block fake product reviews and ratings</li>
</ul>
<h4>⚙️ Advanced Features & Customization</h4>
<ul>
<li>Smart Theme Options – Light, dark, and auto themes that adapt to your site design</li>
<li>Flexible Styles – Normal, Flexible and Compact 3 styles where Turnstile appears on each form</li>
<li>Granular Control – Enable/disable protection for individual forms with one click</li>
<li>Conditional Logic – Smart rules based on user login status</li>
<li>Performance Optimized – Minimal impact on page load times</li>
<li>Mobile Responsive – Perfectly adapted for all devices</li>
<li>Accessibility Ready – Designed with accessibility in mind</li>
</ul>
<h4>🔧 Developer Friendly</h4>
<ul>
<li>Extensive hooks and filters for customization</li>
<li>Clean, well-documented codebase</li>
<li>WordPress coding standards compliant</li>
<li>Easy integration with custom themes and plugins</li>
<li>Comprehensive error logging and debugging</li>
</ul>
<h4>🌍 Multi-language Ready</h4>
<ul>
<li>Full translation support with .pot file</li>
</ul>
<h4>Why Cloudflare Turnstile?</h4>
<ul>
<li>User-Friendly – No annoying puzzles, image recognition, or text challenges</li>
<li>Privacy-First – GDPR compliant and privacy-respecting</li>
<li>Free Forever – Cloudflare’s free tier provides robust protection</li>
<li>Advanced Detection – Machine learning and behavioral analysis</li>
<li>Fast Implementation – Simple setup with Site Key and Secret Key</li>
</ul>
Experience the perfect balance of security and usability! With individual form controls and smart conditional protection, you can secure your site without frustrating your legitimate users.

OhmTang CFT

Integrate Cloudflare Turnstile CAPTCHA for WordPress & WooCommerce forms with custom error messages, each form controlled individually

Aneesh MK

Cybernob Turnstile for Cloudflare integrates <a href="https://www.cloudflare.com/products/turnstile/" rel="nofollow ugc">Cloudflare Turnstile</a> into your WordPress site — the privacy-friendly CAPTCHA that stops bots silently, without making real users solve puzzles.
This plugin is an independent, third-party integration and is not affiliated with or endorsed by Cloudflare, Inc.
<h4>Protected locations</h4>
<ul>
<li>Login form — blocks brute-force and credential-stuffing attacks</li>
<li>Registration form — prevents automated account creation</li>
<li>Comment form — stops spam comments without Akismet</li>
<li>Contact Form 7 — automatically protects every CF7 form on your site</li>
</ul>
<h4>Features</h4>
<ul>
<li>Live status checker — the settings page shows instantly whether your API keys are valid and reachable</li>
<li>Invisible mode — widget stays hidden; the form auto-submits once the challenge passes silently</li>
<li>Three themes — Auto (follows system preference), Light, Dark</li>
<li>Two appearance modes — Always visible, or show on interaction only</li>
<li>Clean uninstall — all plugin options are removed on deletion, including multisite support</li>
<li>Translation ready — all strings wrapped in i18n functions with the correct text domain</li>
<li>No bundled libraries — only Cloudflare’s own CDN script is used; nothing extra added to your site</li>
</ul>
<h4>Why Turnstile?</h4>
Unlike reCAPTCHA, Cloudflare Turnstile does not track users across sites or require Google accounts. It is designed to be GDPR-friendly and invisible to legitimate users by default.
<h4>Getting started</h4>
<ol>
<li>Create a free <a href="https://dash.cloudflare.com/?to=/:account/turnstile" rel="nofollow ugc">Cloudflare Turnstile</a> site widget</li>
<li>Copy your Site Key and Secret Key</li>
<li>Paste them into Settings → Cybernob Turnstile and save</li>
<li>The live status indicator confirms everything is working</li>
</ol>
<h3>External Services</h3>
This plugin connects to Cloudflare’s Turnstile service to display CAPTCHA challenges and verify user responses.
<ul>
<li>Service: Cloudflare Turnstile</li>
<li>When used: When a protected form is loaded (widget script) or submitted (token verification). Only active after the administrator has entered API keys in the plugin settings.</li>
<li>Data sent: On verification — the Turnstile response token and the visitor’s IP address are sent to Cloudflare’s API endpoint.</li>
<li>Endpoint: https://challenges.cloudflare.com/turnstile/v0/siteverify</li>
</ul>
<a href="https://www.cloudflare.com/terms/" rel="nofollow ugc">Cloudflare Terms of Service</a> | <a href="https://www.cloudflare.com/privacypolicy/" rel="nofollow ugc">Cloudflare Privacy Policy</a>

Cybernob Turnstile for Cloudflare

Lightweight Cloudflare Turnstile CAPTCHA protection for WordPress login, registration, comments, and Contact Form 7.

OhmTang CFT vs Cybernob Turnstile for Cloudflare