Skip to content

Find Turnstile parameters

A Turnstile task needs websiteURL (the page showing the widget) and websiteKey (the site key, usually starting with 0x). First make sure it is Turnstile and not the challenge page; see Identify the captcha type.

Method 1: page source. In the Elements panel of the developer tools (F12), search for data-sitekey:

<div class="cf-turnstile" data-sitekey="0x4AAAAAAAxxxxxxxxxxxxxx"></div>

Method 2: scripts. If the widget is rendered with JavaScript, right-click in the Sources panel, choose “Search in all files”, search for turnstile.render, and read sitekey in its options:

turnstile.render('#container', { sitekey: '0x4AAAAAAAxxxxxxxxxxxxxx', callback: onDone });

Method 3: network requests. Search the Network panel for challenges.cloudflare.com; the widget’s iframe URL contains the site key starting with 0x.

The full URL of the page that shows the widget, for example https://example.com/login.

When the task is done, put token into the form’s hidden field named cf-turnstile-response (if the page uses turnstile.render with a callback, call that callback with the token), then submit the form. Use the result’s userAgent as the User-Agent of the submission.