Step 1: Sign Up for Turnstile
To get started with Turnstile, you need to sign up for the service and obtain your site-specific keys. If your website is already registered with Cloudflare Turnstile, your Turnstile keys will be available in your Cloudflare dashboard. In that case, you can skip to the second step. Otherwise:- Visit the Turnstile page in Cloudflare Dashboard.
- Click “Add site” button.
- Provide the Site name (e.g. My Super Website) so you can find it later easily.
- Select or fill in the Domain(s) which you’re going to use Turnstile protection on.
- Select the Widget Mode how the protection should work:
- Managed: Cloudflare will decide if an interactive challenge should be used.
- Non-interactive: Users will just see a widget with a loading bar.
- Invisible: Completely invisible challenge that does not require interaction.
- Click on the “Create” button.
- Site Key: Public key implemented on your site’s frontend.
- Secret Key: Private key used for communication between the backend and the Turnstile service for validating requests from your site. Keep it secure and never reveal it publicly.
Step 2: Configure Turnstile in Comfyform Dashboard
Once Turnstile is set up on Cloudflare, you need to configure it within your Comfyform settings.- Log into your Comfyform dashboard.
- Visit the Forms section and open the form you wish to secure.
- Click on the Security tab.
- Locate the Turnstile section and click “Activate” or “Modify”, depending on the current status.
- Input your Secret Key appropriately.
- To save and enable Turnstile protection, click the Save changes.
Step 3: Implement Turnstile on Your Site
To ensure the Turnstile security is operational, integrate the Turnstile script into your website’s form pages according to Cloudflare’s documentation and we’ll handle the validation process.Step 4: Test Your Turnstile Integration
With Turnstile now active, it’s important to ensure everything functions as intended:- Test your forms to confirm that Turnstile is operational.
- Verify that submissions are processed appropriately, with bot traffic being filtered out.