Cloudflare Turnstile

Configure optional anti-spam protection for public bookings.

Enable Turnstile

Turns Cloudflare Turnstile verification on for the public booking form.

Site key

The public Turnstile site key supplied by Cloudflare for the booking domain.

Secret key

The private Turnstile secret. It is used server-side to validate the visitor response.

For security, the saved secret is not displayed back in the field. Leave the field blank when saving other Turnstile changes if you want to keep the current secret.

Save Turnstile

Saves only the Turnstile section.

When to enable it

Turnstile is recommended when the public booking page is receiving automated spam or when you want additional bot protection.

DoorFall also includes basic public booking rate limiting and a hidden bot trap.

Last updated August 22, 2026