Add Cloudflare Turnstile to your Joomla Form

Cloudflare Turnstile is a user-friendly, GDPR-compliant reCAPTCHA alternative that helps protect your Joomla forms from spam and abusive use. Turnstile is easy to use, provides a variety of themes and sizes, and operates invisibly in the background without requiring users to solve puzzles.

Convert Forms includes built-in support for Cloudflare Turnstile. In this tutorial, we'll guide you through setting up and using Turnstile within Convert Forms to enhance your form's security.

• Generate Turnstile Keys
• Add Turnstile to Joomla Forms
• Add Invisible Turnstile to Joomla Forms
• Why you probably don’t need Turnstile

Generate Turnstile Keys

To generate the required keys, you must log into your Cloudflare account by visiting https://dash.cloudflare.com/.

After logging in, select your account and click on the "Turnstile" menu item on the left-hand sidebar.

On the new page, click on the "Add Site" button.

Next, enter your Site Name, add your domain, select the "Managed" widget mode, and click the "Create" button.

Your Turnstile keys are ready! You can now copy your keys over to your Convert Forms configuration settings.

Add Turnstile to Joomla Forms

In the Joomla administration environment, click on Global Configuration -> Convert Forms and click on the "Turnstile" tab.

Here is where your keys must be placed. Fill in both the "Site key" and "Secret key" fields using Turnstile's corresponding keys.

Next, go to the main administration menu: Components -> Convert Forms -> Forms.

Choose the form you want to edit.

Choose the "Add Field" tab and click on the Turnstile field in the Advanced Fields category. Save your work.

Subsequently, more appearance options are given, where you can optionally choose the Turnstile theme and size in the respective field options.

Turnstile comes with Light and Dark themes, as well as Normal and Compact sizes, as seen below:

Light Normal

Dark Normal

Light Compact

Dark Compact

Finally, after all the changes, save your work. Your Turnstile field is ready!

Add Invisible Turnstile to Joomla Forms

To add an invisible Turnstile to your form, follow the same steps under Generate Turnstile Keys, and on the Add Site step, select Invisible as the Widget Type.

Save your site settings, and follow the rest of the guide described under Add Turnstile to Joomla Forms.

Finally, after all the changes, save your work. Your Turnstile Invisible field is ready!

Why you probably don’t need Turnstile

Without you having to do a thing, Convert Forms is already protecting your forms from spam submissions. By default, a honeypot field is automatically added to each form. It's designed to catch spammers like an actual pot of honey would catch flies. It's just a hidden field placed into every form, and its purpose is to make form submission fail if anything is entered into it.

Read more here: Native Convert Forms Anti-spam Protection with Honeypot

Tips:

• Don’t forget to store your keys.