Turnstile CAPTCHA For WooCommerceTurnstile CAPTCHA For WooCommerce
Buy Now
View Demo
  • Getting Started

    • Introduction
    • Quick Start
    • Features
    • Installation
    • First-Time Setup
    • Get Turnstile Keys
    • Onboarding Wizard
  • Settings

    • Settings Overview
    • API Settings
    • General
    • Design Studio
    • Conditional Rules
    • Per-Form Config
    • Notifications
  • Supported Forms

    • All Supported Forms
    • WooCommerce Forms
    • WordPress Forms
    • Third-Party Form Plugins
    • Checkout Blocks
    • Shortcode
  • Protection & Monitoring

    • Analytics Dashboard
    • Rate Limiting
    • Recovery URL
    • Email Digest
    • Webhooks
  • Developer

    • REST API
    • Filters & Hooks
    • Site Health
  • Compare

    • vs reCAPTCHA
    • vs hCaptcha
  • Help

    • Troubleshooting
    • FAQ
    • Glossary
Support
Buy Now
View Demo
  • Getting Started

    • Introduction
    • Quick Start
    • Features
    • Installation
    • First-Time Setup
    • Get Turnstile Keys
    • Onboarding Wizard
  • Settings

    • Settings Overview
    • API Settings
    • General
    • Design Studio
    • Conditional Rules
    • Per-Form Config
    • Notifications
  • Supported Forms

    • All Supported Forms
    • WooCommerce Forms
    • WordPress Forms
    • Third-Party Form Plugins
    • Checkout Blocks
    • Shortcode
  • Protection & Monitoring

    • Analytics Dashboard
    • Rate Limiting
    • Recovery URL
    • Email Digest
    • Webhooks
  • Developer

    • REST API
    • Filters & Hooks
    • Site Health
  • Compare

    • vs reCAPTCHA
    • vs hCaptcha
  • Help

    • Troubleshooting
    • FAQ
    • Glossary
Support
  • Getting Started

    • Introduction
    • Quick Start — Turnstile Live in 5 Minutes
    • Features — Everything the Plugin Can Do
    • Installation — Full Setup Guide
    • First-Time Setup
    • Get Turnstile Keys from Cloudflare
    • Onboarding Wizard
  • Settings

    • Settings Overview — All 9 Tabs
    • API Settings Tab
    • General Settings Tab
    • Design Studio Tab
    • Conditional Rules Tab
    • Per-Form Config Tab
    • Notifications Tab
  • Supported Forms

    • All Supported Forms
    • WooCommerce Forms
    • WordPress Forms
    • Third-Party Form Plugins
    • Checkout Blocks Integration
    • Shortcode — Drop the Widget Anywhere
  • Protection & Monitoring

    • Analytics Dashboard
    • Rate Limiting — Auto-Lockout for Abusive IPs
    • Recovery URL — Unlock a Stuck IP
    • Email Digest
    • Webhooks — Real-Time Alerts on Bot Spikes
  • Developer

    • REST API
    • Filters & Hooks
    • Site Health Integration
  • Compare

    • Turnstile vs Google reCAPTCHA
    • Turnstile vs hCaptcha
  • Help

    • Troubleshooting
    • Frequently Asked Questions
    • Glossary

Onboarding Wizard

A guided 3-step setup launches automatically the first time you open the plugin after activation. It gets you from "just installed" to "Turnstile is live" in about 60 seconds.

When It Runs

TriggerBehavior
Right after plugin activationA transient wkcft_show_onboarding is set for 30 days
First admin page loadA banner prompts you to start the wizard
URL ?page=wkcft-onboardingAlways launches the wizard — use this to re-run it
After API keys are saved AND forms are pickedTransient clears, banner disappears

The 3 Steps

Step 1 — API Keys

Onboarding Step 1 — API keys

What you do:

  1. Paste the Site Key (starts with 0x4AAA...)
  2. Paste the Secret Key (same format — do not share this one)
  3. Click Test Connection — the plugin pings Cloudflare and shows a green check or red error
  4. Click Next when the test passes

Do not have keys yet? Click Get Keys to jump to the Cloudflare dashboard. See Get Turnstile Keys for the full walkthrough.

Step 2 — Pick Forms

Onboarding Step 2 — pick which forms to protect

What you do:

Tick the forms you want Turnstile on. Default selection:

  • [x] WooCommerce Login
  • [x] WooCommerce Registration
  • [x] WooCommerce Lost Password
  • [x] WooCommerce Checkout

Optional extras:

  • [ ] Pay for Order
  • [ ] WP Login
  • [ ] WP Register
  • [ ] WP Comments

Click Next.

Start with the minimum

Tick only the 4 default WooCommerce forms to start. You can enable more later from the settings tabs. This avoids any chance of widget conflicts on a third-party form.

Step 3 — Finish

Onboarding Step 3 — finish and save

What you see:

  • Summary of which forms are now protected
  • A Test a form button that opens your WooCommerce login in a new tab
  • A Finish button that saves and redirects to the main settings page

Click Finish. You land on WooCommerce → Turnstile Settings → API Settings tab with a "Setup complete" banner.

What the Wizard Sets Under the Hood

SettingValue After Wizard
wkcft_site_keyYour pasted Site Key
wkcft_secret_keyYour pasted Secret Key
wkcft_login, wkcft_register, wkcft_password_reset, wkcft_block_checkoutyes if ticked
wkcft_themelight (default)
wkcft_appearancealways (default)
wkcft_load_modeinstant (default)
wkcft_error_messagePlease complete the security check.
wkcft_show_onboarding transientDeleted

Dismissing the Wizard

If you prefer manual setup:

  1. Click Skip on any step
  2. The banner stays on screen until you either enter keys or explicitly dismiss
  3. Dismiss for now — hides the banner for 30 days
  4. To re-launch the wizard any time: visit wp-admin/admin.php?page=wkcft-onboarding&step=1

Re-running the Wizard

Some reasons to re-run:

  • You rotated your Cloudflare Secret Key
  • You want to reset your initial form selection
  • You installed the plugin on a staging site and need to re-enter keys

Just visit the URL directly:

https://yoursite.com/wp-admin/admin.php?page=wkcft-onboarding&step=1

AJAX Actions

For developers who want to hook into the wizard:

ActionPurpose
wp_ajax_wkcft_onboarding_saveSaves step data — fires on Next button
wp_ajax_wkcft_onboarding_dismissDismisses the wizard — fires on Skip button

Nonce: wkcft_onboarding.

Capability required: manage_woocommerce.

What to Do After the Wizard

  1. Test — Open a protected form in incognito, verify the widget appears
  2. Customize — Design Studio to match your theme colors
  3. Add rules — Conditional Rules to skip yourself
  4. Watch — Analytics for first bot hits

Related Pages

  • First-Time Setup — Manual version of this wizard
  • Get Turnstile Keys — Before Step 1
  • Quick Start — Full 5-minute flow
Prev
Get Turnstile Keys from Cloudflare