Configure Cloudflare Turnstile in Regal Forms

Updated September 20, 2026

Regal Forms Turnstile adds Cloudflare’s privacy-focused challenge to selected forms. Configure the shared site and secret keys once in WordPress, confirm that both values are stored, then enable protection only on the forms that need it.

Configure Regal Forms Turnstile keys#

  1. Create a Turnstile widget in your Cloudflare account and copy its site key and secret key.
  2. In WordPress, open Regal Forms > Settings.
  3. Enter the site key and secret key.
  4. Select Save settings. The button is locked while the request is running and changes to Saving… to prevent duplicate submissions.
  5. Wait for the green Turnstile settings saved confirmation.

The Configuration status panel shows whether the site key and secret key are configured. The saved secret is never displayed in the page. Leave the Secret key field blank on later saves to keep the stored value, or enter a replacement secret when rotating credentials.

Enable Turnstile on a form#

  1. Open Regal Forms > Forms and edit the required form.
  2. Select Form settings in the builder header.
  3. Enable Cloudflare Turnstile.
  4. Save the form.
  5. Open the published page while signed out and submit a valid test entry.

Turnstile is enabled per form. Saving keys in Regal Forms Settings does not automatically add protection to every existing form.

Check the save confirmation and key status#

While settings are being saved, the button displays a spinner, is temporarily unavailable and provides an accessible progress announcement. After WordPress completes the request, the success panel confirms the save. If both status badges read Configured, the shared setup is ready for form-level use.

Troubleshoot Regal Forms Turnstile#

  • If a status badge reads Not configured, enter the missing value and save again.
  • If the secret is already configured, leave its field blank. An empty field does not remove the stored secret.
  • If the widget does not appear, confirm Turnstile is enabled in that form’s Form settings and save the form.
  • If verification fails, confirm the widget allows the site’s current hostname and replace either key that was copied incorrectly.
  • Clear page caches after enabling Turnstile, then test in a signed-out browser session.

See Cloudflare’s Turnstile setup documentation for help creating a widget and choosing its hostname settings.

Was this article helpful?

Still need help? Contact support