Skip to content

v2.6.0 — Cloudflare Turnstile login protection

Choose a tag to compare

View all tags
@X4Applegate X4Applegate released this 12 Apr 21:19
· 238 commits to main since this release
v2.6.0
ce1f139

What's new

Login Protection (Cloudflare Turnstile)

Protect your login form against bots and brute-force attacks using Cloudflare's free Turnstile widget — a privacy-friendly alternative to reCAPTCHA that doesn't show distorted text puzzles.

Setup:

  1. Go to dash.cloudflare.com → Turnstile and create a free site
  2. In the admin panel → Settings tab, enter your Site Key and Secret Key
  3. Check Enable Turnstile on login page and save

How it works:

  • The widget only loads on the login page when enabled — zero impact when disabled
  • Automatically skipped during first-time admin setup (no admin exists to configure it yet)
  • Failed verifications are logged in the system log with the username and reason
  • Widget resets automatically after a failed login so the user can retry without reloading

Settings tab

  • Header updated from "SMTP & Email Notifications" to "Settings" as the tab now covers both SMTP and Turnstile configuration
Assets 2
Loading