Configure Cloudflare Turnstile challenges

Where: Protection → Challenges and network

Steps

1. Create a Turnstile widget for the exact forum hostname with the provider.
2. Enter the site key, secret and configured hostname in Sentinel; blank secret fields retain saved credentials.
3. Select the intended guest/network challenge behaviour, starting in Monitor.
4. In a disposable ordinary session verify the widget and server-side completion on the intended host.
5. Review failure and interrupted-form behaviour before enabling Enforce for real visitors.

Check the result

A challenge pass binds the required session/address/user-agent/configuration checks. The board does not replay an interrupted upload or form automatically.

If it does not work

Check JavaScript, active session, exact hostname, provider configuration and server runtime dependencies. A missing challenge runtime can return 503 rather than grant a bypass. Use File Manager recovery if necessary.