Xtreme TurnstileConfiguration

Configuring Turnstile Settings

Enter Your API Keys

  1. In your WordPress admin, go to Settings > Xtreme Turnstile.
  2. Paste your Site Key into the first field.
  3. Paste your Secret Key into the second field.
  4. Click Save Changes.

The plugin immediately tests the keys by making a verification request to Cloudflare. A green success banner confirms your keys are valid. If you see a red error, double-check for trailing spaces or mismatched keys.

Widget Appearance

Under the Appearance section, configure how the Turnstile widget looks:

  • Theme — Choose Auto (follows the user's system dark/light preference), Light, or Dark.
  • Size — Normal (300 x 65 px) or Compact (150 x 140 px). Compact works better on narrow sidebars or mobile layouts.
  • Language — Auto-detect (default) or force a specific language.

Supported Forms

Xtreme Turnstile can protect the following form types. Toggle each one on or off:

WordPress Core Forms

  • Login form (wp-login.php)
  • Registration form
  • Password reset form
  • Comment form

WooCommerce Forms

  • Checkout
  • Login / Registration on My Account page
  • Product review form

Third-Party Form Plugins

  • Xtreme Forms (native integration)
  • Contact Form 7
  • WPForms
  • Gravity Forms

For third-party plugins, Xtreme Turnstile automatically injects the widget before the submit button. No shortcode or manual code is needed.

Advanced Options

  • Error Message — Customize the message shown when Turnstile verification fails (default: "Please verify you are human.").
  • Exclude Logged-In Users — Skip the Turnstile challenge for authenticated users who are already logged in.
  • Allowlist IPs — Enter IP addresses that should bypass verification (useful for automated testing).