Changelog

Last updated Apr 16, 2026View as MarkdownAgent setup

Subscribe to RSS

2026-07-22

Turnstile may now make requests to hagen.challenges.cloudflare.com or brunhild.challenges.cloudflare.com as part of browser verification. Add both hostnames to your network allowlist so Turnstile can access them. For more information, refer to Failed subdomain network requests during Turnstile challenges.

2024-08-12

Added [flexible] width widget size.
Added new dimensions for Turnstile's compact size.
Added a Feedback Report toggle on the widget's configuration.

2024-04-10

Added [refresh-timeout] and document new automatic interactive timeout-refresh.

2024-03-25

Added more supported languages.

2023-12-18

Added Pre-Clearance mode.

2023-08-24

Added Client-side errors.

2023-07-31

Added [turnstile.isExpired].
Added uk language.

2023-05-25

Added idempotency support for POST /siteverify requests via the idempotency_key parameter.

2023-04-17

Added references to Turnstile Public API.
Added references for [after-interactive-callback], [before-interactive-callback], and [unsupported-callback].

2023-03-06

Added [execution] and [appearance].

2023-02-15

Added the [turnstile.ready] callback.

2023-02-01

Added the [data-]language parameter.

2022-12-12

POST /siteverify supports JSON requests now.

2022-11-11

Added retry and retry-interval for controlling retry behavior.

2022-10-28

Renamed the [data-]expired-callback callback to [data-]timeout-callback (called when the challenge times out).
Added the [data-]expired-callback callback (called when the token expires).

2022-10-24

Added response-field and response-field-name for controlling the input element created by Turnstile.
Added option for changing the size of the Turnstile widget.

2022-10-13

Added validation for action: /^[a-z0-9_-]{0,32}$/i
Added validation for cData: /^[a-z0-9_-]{0,255}$/i

2022-10-11

Added turnstile.remove

Was this helpful?