1. Create a Cloudflare account if haven't already. 2. Create a new Turnstile Sites: Add a name, add your domain names and choose the "Managed" widget mode setting.
3. Initialize and customize the Turnstile plugin in your Bubble app. Don't forget to add your Secret Key in the Plugin Settings.
4. Once a challenge has been solved, a token is passed to the success callback. This token must be validated against the siteverify endpoint, using the "Verify Turnstile Token" action.
5. The action will have a success state (y/n) which you can use in your further Bubble workflows.


A token can only be validated once and cannot be consumed twice.

If you rotate your secret key make sure to update in Bubble as well.