Block bots with Turnstile

Turnstile is an invisible check from Cloudflare that stops bots signing up through your form. Most visitors never see it. Every form already has basic bot protection, so turn Turnstile on if junk still gets through: made-up names, nonsense addresses, or a burst of signups you can’t explain.

Turn it on

• Inline form or popup: on the builder’s Behaviour tab, under Protection, tick Invisible CAPTCHA.
• Landing page: in Page settings, under Protection, tick Protect with an invisible CAPTCHA.

Save, and that’s it. There’s nothing else to set up.

If a visitor doesn’t pass the check, the form asks them to complete a quick verification and try again.

For the strongest protection, also turn on double opt-in for the list, so nobody joins without confirming from their own inbox. See Set up double opt-in.

Next steps

• I signed up to test my form, but nothing appeared
• Add a form to your website