Chances are, if you’re here, some app is asking for your Cloudflare Turnstile credentials. This “how to” explains how to retrieve your Site and Secret keys for Cloudflare Turnstile.
Step 1: Head to Cloudflare and log into your account
You do not need to pay for Cloudflare to enable Cloudflare Turnstile. Simply sign up for an account, and when you log in, you’ll see Turnstile on the left sidebar.
Step 2: Add a new site
When clicking on Turnstile on the left sidebar, you’ll be presented with an area where you can add a new site.
Once you click “Add Site,” you’re taken to a new screen where you can add your site name, domain, and the type of protection you’d like.
The “challenge” behavior, or when someone is asked to verify they are human, is a part of the Turnstile experience.
“Managed” widget (recommended)
You can choose “Managed” and have Turnstile decide for you what kind of challenge to present to the user (if any).
“Non-interactive” widget
This widget is pass/fail. If the user fails verification, then that user is typically rejected and has to try again.
“Invisible” widget
This is a pass/fail verification. This fails silently, and it is up to the implementer to display any errors to the user.
For “non-interactive,” this is a pass/fail.
Once you’ve decided, click on “Create” to create your site.
Once you choose to “Create” the site, you’ll be shown instructions and receive a Site Key and a Secret Key.
Step 3: Grab your Site and Secret keys
Once you’ve created your site, you’ll have access to your Site and Secret keys. You can use these keys where asked.
Conclusion
In this short “how to,” I’ve shown how to retrieve your Turnstile Site and Secret keys.