← All Tools
Turnstile Widget Builder Generator🔒 100% local
Cloudflare Turnstile code. Privacy-first, no server uploads, no tracking.
Related Tools
Builds Cloudflare Turnstile integration code from a sitekey: the script tag and widget markup, a JavaScript snippet for explicit rendering, and a Cloudflare Workers example that verifies the token server-side. Supported modes are managed, non-interactive and invisible.
How to use it
- Paste your Turnstile sitekey, optionally followed by a comma and a mode: managed, non-interactive or invisible.
- Press Process.
- Copy the HTML and JavaScript into your form and keep the secret-key verification on the server.
Worked example
1x00000000000000000000AA, managedbecomesTurnstile widget — mode: managed
Mode: managed: Cloudflare decides whether to challenge; usually a checkbox.
=== HTML (implicit rendering) ===1x00000000000000000000AA is Cloudflare's public test sitekey, which always passes; the output continues with the script tag, the form markup, a JavaScript section and a Workers verification handler.
When to use it
- Adding a bot check to a signup or contact form without pulling in reCAPTCHA.
- Moving an existing form to invisible mode so the challenge runs on submit rather than on page load.
- Getting a server-side siteverify example in place before wiring up the secret key.
What it does not do
- The prefilled example is Cloudflare's public test sitekey, which always passes. Replace it with your own key before deploying anything generated here.
- The second field is read as a mode name only. It is not parsed as a parameter, so a value like theme: light changes nothing and the generated widget always hard-codes data-theme to auto.
- It writes code rather than rendering a widget. No challenge appears on this page, and the Workers example is a template that still needs your secret bound as TURNSTILE_SECRET.
- The sitekey is only shape-checked (ten or more characters of letters, digits, dash or underscore), so a wrong but well-formed key passes and fails later at Cloudflare.