Skip to main content
Protect your forms from spam and bot submissions by integrating Cloudflare Turnstile, a privacy-first, frictionless captcha alternative that verifies your form is being submitted by a real person. Bots and automated spam can quickly fill your inbox with junk submissions. This guide walks you through integrating Turnstile into your form, so only real users get through.
Cloudflare Turnstile integration is available on the Paid plan.

​
Setting Up Cloudflare Turnstile

Follow these steps to add Turnstile protection to your form.
1

Get Your Turnstile Keys

Sign up or log in to the Cloudflare Dashboard, navigate to Turnstile, and create a new site to get your Site Key and Secret Key.
2

Enable Turnstile in Your Form Settings

Go to your form’s Settings page, add Cloudflare Turnstile Protection, and paste in your Secret Key. PipedForm will use this to verify submissions on the server side.
3

Add the Turnstile Widget to Your Form

Add the Cloudflare Turnstile script to the <head> section of your page:
<script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
Add the widget inside your form using your Site Key (replace your-site-key):
<form action="https://pipedform.com/f/{form_id}" method="POST">
  <!-- ... -->
  <div class="cf-turnstile" data-sitekey="your-site-key"></div>
  <!-- ... -->
</form>
4

Test Your Form

Submit a test entry through your form. If the Turnstile challenge isn’t completed, PipedForm will reject the submission and it won’t be forwarded to any of your connected destinations.
For more advanced configuration options, such as customizing the widget’s appearance, theme, or size, refer to the official Cloudflare Turnstile documentation.
Notes:
  • Both the Site Key (used in your form) and Secret Key (used in your form settings) are required for Turnstile to work.
  • If Turnstile is enabled but the widget is missing from your form, all submissions will be rejected.