Welcome to BotSailor Help! Just use the email OTP to sign in and track your tickets. Password login isn’t needed anymore.
Cloudflare Turnstile is a privacy-focused CAPTCHA alternative that protects your forms from bots and spam—without user frustration. Unlike traditional CAPTCHAs, Turnstile uses smart challenge detection and behavioral signals without showing puzzles or image selections. Integrating Turnstile with your BotSailor-powered website ensures better user experience, enhanced protection, and frictionless form interactions.
Why Use Cloudflare Turnstile?
✅ Frictionless CAPTCHA — Users aren’t shown puzzles or images.
🔐 Privacy-First — No user data is shared with ad networks.
🚀 Fast & Lightweight — No third-party JS or slowdowns.
🌍 Free to Use — Available for any domain.
1. Go to Turnstile in Cloudflare
Log into your Cloudflare account.
On the left menu, click Turnstile (see red arrow in Image 1).
Click on Add widget.
2. Add Widget Details
Give your widget a name for easy identification.
Click on Add Hostnames.
3. Add Hostname
Either choose from existing domains or enter your custom domain (e.g. yourdomain.com).
Click Add (Image 3).
Your selected domain will now appear under Selected hostnames.
Click Add again to confirm.
4. Finalize Widget Settings
Make sure your domain is selected.
Choose Managed mode (recommended). Managed mode lets Cloudflare decide the interaction level.
Optionally, enable or disable Pre-clearance.
Click Create (Image 4).
5. Copy Your API Keys
Once the widget is created, you will get: Site Key & Secret Key
Save these keys securely.
How to Use in BotSailor
After getting the Site Key and Secret Key:
Go to your BotSailor backend panel.
Navigate to Settings > Security or Captcha (depending on your version).
Choose Cloudflare Turnstile as CAPTCHA type.
Paste your Site Key and Secret Key.
Save the settings and test the form.
Tips for Best Use
✅ Use subdomains (e.g., form.yourdomain.com) to separate widget setups.
🧪 Always test forms after enabling CAPTCHA.
🔁 Rotate or refresh keys periodically for added security.
🚫 Avoid using multiple CAPTCHA solutions on one form.
Conclusion
Cloudflare Turnstile is the modern CAPTCHA solution that blends strong bot protection with a smooth user experience. Integrating it with BotSailor boosts your security while keeping your customers happy. Set it up in just a few clicks and forget the annoying “click all the traffic lights” challenges forever!
Frequently Asked Questions (FAQ)
What is Cloudflare Turnstile?
Cloudflare Turnstile is a smart, user-friendly CAPTCHA alternative that uses behavioral signals to block bots without showing puzzles or images.
Why should I use a Turnstile with BotSailor?
It provides strong bot protection with no user frustration, improves form conversion rates, and respects user privacy. It’s ideal for modern chatbot workflows.
Is Cloudflare Turnstile free?
Yes, Turnstile is completely free for all users and domains on Cloudflare.
Where do I find the Turnstile setup option in Cloudflare?
After logging in to your Cloudflare dashboard, go to the Turnstile tab in the left menu. Click Add widget to begin setup.
What are the Site Key and Secret Key used for?
Site Key is added to your frontend forms to load the CAPTCHA.
Secret Key is used server-side to validate CAPTCHA responses.
How do I add these keys in BotSailor?
Go to Settings > Security or Settings > Captcha in your BotSailor backend, select Cloudflare Turnstile, and paste both keys. Save the settings.
Which mode should I choose in Turnstile: Managed or Non-interactive?
Use Managed mode, which lets Cloudflare adjust the challenge level based on user behavior automatically.
Can I use Turnstile for subdomains?
Yes. You can set it up for subdomains like form.yourdomain.com, which helps isolate and manage specific use cases more effectively.
What should I do if the CAPTCHA doesn’t appear after setup?
Confirm that the correct domain is listed in the widget.
Ensure the Site Key is placed in the form.
Check for JavaScript errors in your browser console.
Should I rotate or regenerate my keys over time?
Yes. For better security, periodically refresh your Secret Key, especially if there’s any chance it has been exposed.