Test mode: Using Cloudflare test key: this widget forces an INTERACTIVE challenge (visible checkbox). Return to real widget

Paul's Council - Contact Form

Turnstile Managed widget managed pre-clearance: interactive ephemeral IDs: on

What this demo shows: The user solves one invisible Turnstile challenge. On success, the Worker calls siteverify server-side. This is the baseline pattern.

Try the other demos:

Login (Fraud Detection) - credential stuffing story with ephemeral IDs
Widget Modes - Managed / Non-Interactive / Invisible side-by-side
API endpoint - protect JSON APIs with curl-testable Turnstile flow
Pre-Clearance - session-wide clearance with cf_clearance cookie
Replay Attack - why one-time-use tokens matter
Debug - inspect raw siteverify JSON response
Analytics - live event counts across all demo routes

Test key override: Append ?key=alwaysPass, ?key=alwaysBlock, or ?key=forceInteractive to any page URL to swap in a Cloudflare test key. Great for showing "watch what happens if a bot tries this" without needing to actually be a bot.

Try: /?key=alwaysBlock | /?key=forceInteractive