Recommended
Spam protection
Stop bots on your forms (Cloudflare Turnstile)
Without it: Forms rely on hidden traps and rate limits only, so more spam gets through.
Cloudflare Turnstile checks that a real person sends your sign-up and contact forms. It is free and needs a free Cloudflare account, even if your domain is not on Cloudflare. Your free address is covered by our default keys; once you connect your own domain, add your own keys.
Steps
-
1Create a widget
In Cloudflare open Turnstile and press Add widget. Name it after your website, add each hostname below (a hostname also covers its subdomains), choose Managed mode and leave pre-clearance off. Press Create.
-
2Paste the keys
Cloudflare shows a Site Key and a Secret Key. Paste both here. If a form later says the domain is not allowed, add that hostname to the widget.
In your dashboard you fill in: Site key; Secret key.
-
3Done
Your forms now check for bots on every address of your website.
In your dashboard: Settings → Connections → Spam protection → Set up. Provider steps checked Oct 31, 2026.