How to Enable Cloudflare Turnstile

Introduction

Cloudflare Turnstile is a modern, user-friendly alternative to traditional CAPTCHAs. Unlike intrusive puzzle-solving or image verification tests, Turnstile protects your website's forms and interactions from automated bots while providing a smooth, invisible, or single-click experience for real visitors.
By enabling Cloudflare Turnstile on your eDirectory website, essential entry points—such as sign-in forms, registration pages, and user contact forms—are protected against spam and malicious scripts without adding unnecessary friction to the user experience.
This guide walks you through creating a Cloudflare Turnstile widget, obtaining your API keys, and integrating them into your eDirectory website.

Important Note: This resource is available only in eDirectory version 14.2+

Before You Begin

Before configuring Cloudflare Turnstile, ensure you have:
  1. A Cloudflare Account (you can create a free account if you do not have one).
  2. Administrator access to your eDirectory Site Manager.
  3. A live domain connected to your eDirectory website.
Important: Cloudflare Turnstile strictly validates the domain name where the challenge runs. If your website is currently using a temporary staging URL or if you plan to update your main domain soon, please contact our support team at support@edirectory.com before configuring Turnstile.

Step 1: Register Your Website with Cloudflare Turnstile

  1. Visit the Cloudflare Dashboard and log in with your credentials.
  2. In the left navigation menu, go to Protect & Connect → Application Security → Turnstile.

  1. Click Add Widget (or Add Widget Manually).

  1. Complete the widget creation form with the following details:
    • Widget Name: Enter a recognizable label for your site (e.g., yourdomain.com).
    • Domain / Hostname: Click to add your site's fully qualified domain name (FQDN).
      • Example: yourdomain.com
      • Do not include http:// or https://.
      • Do not include specific page paths (e.g., yourdomain.com/contact).
    • Widget Mode: Select Managed (Recommended).

Note on Managed Mode: Cloudflare's Managed mode analyzes visitor traffic non-intrusively. Real visitors pass through automatically or via a light checkbox without tedious image challenges, while suspicious requests are challenged effectively.
  1. Click Create to generate your widget.

Step 2: Obtain Your API Keys

Once the widget is created, Cloudflare immediately displays your credentials:
  • Site Key: The public key used by eDirectory to display the Turnstile widget on your forms.
  • Secret Key: The private key used for secure server-to-server communication between eDirectory and Cloudflare.
Copy both keys and keep them open in a safe tab. You will need to paste them into your eDirectory Site Manager in the next step.

Step 3: Integrate Cloudflare Turnstile with eDirectory

  1. Open a new tab and log into your eDirectory Site Manager.
  2. Go to Settings → General Settings → Captcha.
  3. Under the Captcha selection, choose Cloudflare Turnstile.
  4. Paste your keys into their respective fields:
    • Site Key
    • Secret Key
  5. Click Save Changes.

Verifying the Integration

To confirm that Cloudflare Turnstile is active and protecting your forms:
  1. Open a new private/incognito browser window and navigate to your website.
  2. Click Sign In in the top-right corner of the header.
  3. In the pop-up modal, select Register.
  4. Look at the bottom of the registration form: you should see the Cloudflare Turnstile verification widget (e.g., displaying "Success!" or a light verification checkmark).

If the Turnstile block loads successfully, your integration is live and working.

Troubleshooting

The Turnstile widget does not appear on my forms

Check the following:
  • Verify that you selected Cloudflare Turnstile under Settings → General Settings → Captcha and clicked Save Changes.
  • Confirm that both the Site Key and Secret Key were copied in full without extra spaces.
  • Clear your browser cache or open the page in an Incognito tab to bypass cached content.

Cloudflare displays "Domain Validation Error" or "Error 110200"

  • Ensure the hostname entered in your Cloudflare Turnstile widget setup matches your live site URL exactly.
  • Avoid adding prefixes like https:// or extra path extensions in Cloudflare's hostname field.

I see an "Invalid Key" error

  • Double-check that you did not accidentally paste your Google reCAPTCHA keys into the Turnstile fields or vice versa. Turnstile Site Keys and Secret Keys are unique to Cloudflare's platform.

Conclusion

Congratulations! Cloudflare Turnstile is now actively safeguarding your eDirectory site against spam and automated abuse while offering your visitors a seamless, modern browsing experience.
Did this answer your question? Thanks for the feedback There was a problem submitting your feedback. Please try again later.