announcement··5 min read·WoWSQL Team

Cloudflare Turnstile CAPTCHA Is Now Live in WoWSQL Auth

Cloudflare Turnstile CAPTCHA is now live in WoWSQL Auth. Block bots and fake sign-ups without annoying real users, verified on our servers.

We care about your users' security. That's why Cloudflare Turnstile CAPTCHA is now live in WoWSQL Auth, giving every WoWSQL project built-in protection against bots and fake sign-ups.

The problem: bots love sign-up forms

If your app has user accounts, bots will find it. Automated scripts can:

  • Create thousands of fake accounts
  • Abuse free trials and free tiers
  • Fill your database with junk data
  • Hammer your login page trying stolen passwords

Rate limits slow them down, but determined bots can rotate IP addresses. You need a way to tell real people from scripts.

The solution: Cloudflare Turnstile, built into WoWSQL Auth

Cloudflare Turnstile is a modern, privacy-friendly CAPTCHA. Unlike old-style CAPTCHAs, it doesn't ask your users to click on traffic lights or type blurry letters. It checks quietly in the background, and most real users never see a challenge at all.

Here's how it protects your project:

  • Bots out. Automated sign-ups and login attempts are blocked before they reach your users table.
  • Real users in. No annoying puzzles, so your sign-up flow stays fast and friendly.
  • Verified on our servers. Your app sends the Turnstile token with the sign-up or sign-in request, and WoWSQL checks it before anything goes through. A bot can't get around it by hiding or skipping the widget.

How to turn it on

  1. Enable Cloudflare Turnstile in your project's Auth settings in the WoWSQL dashboard.
  2. Add the Turnstile widget to your sign-up and sign-in pages.
  3. Pass the Turnstile token with your auth calls using any WoWSQL SDK from v3.9.3. That's JavaScript, Python, Go, PHP, Swift, Flutter, Rust, C#, Ruby, Java or Kotlin.

The CAPTCHA token is optional in the SDKs, so existing apps keep working until you're ready to switch it on.

Part of a bigger security story

Turnstile joins the protections already built into WoWSQL Auth:

  • Email and phone OTP sign-in
  • Rate-limited logins and generic error messages
  • Data locked behind your project's API keys
  • Encrypted connections everywhere, with daily security audits

Security shouldn't be an afterthought. With WoWSQL, it's built in.

Questions about setting up Turnstile? Reach us anytime at support@wowsql.com.