Cloudflare Turnstile CAPTCHA

Cloudflare Turnstile is now available as a CAPTCHA provider. Turnstile is free, privacy-first, and verifies most visitors in the background, so real users almost never see a challenge while bots get stopped before they reach your inbox.

New

• Turnstile as a CAPTCHA provider: Create a widget in the Cloudflare dashboard, then paste its Secret Key into Form Settings → CAPTCHA → Cloudflare Turnstile. Forminit verifies the token with Cloudflare on every submission
• Spam folder, not lost submissions: Submissions with a missing, invalid, or expired token are marked as spam and kept in your Spam folder instead of being silently dropped
• Works with any frontend: Plain HTML forms need zero JavaScript (the widget injects the token automatically), and the docs include ready-to-use examples for the Forminit SDK, React, Next.js, and Nuxt
• Verification logs: See how each submission’s Turnstile check went in Form Settings → Logs

Why Turnstile?

No puzzles for your visitors, no tracking cookies, no data sold, and no Google account required. Unlimited verifications on Cloudflare’s free tier. If you are setting up spam protection for a new form today, Turnstile is the provider we recommend.

The Cloudflare Turnstile documentation walks through widget creation with screenshots, has copy-paste code for every framework, and includes a ready-made prompt you can hand to your AI coding agent to wire it up for you.