PLEASE stop using Google ReCAPTCHA and do this instead. (Cloudflare Turnstile)

Want to prevent bot spam on your website with a CAPTCHA? Don't use Google's ReCAPTCHA service. The user experience is awful and it's a privacy nightmare. Everybody's tired of clicking on the stop signs. Instead, try Cloudflare's Turnstile, which is a CAPTCHA alternative that's free, easy to set up and use, and more privacy-respecting.
Cloudflare Turnstile Documentation: developers.cloudflare.com/tur...
Cloudflare Turnstile Demo GitHub: github.com/cloudflare/turnsti...
🌐 My website: ericmurphy.xyz
💸 Support the Channel: ericmurphy.xyz/donate
🎥 Watch my videos on Odysee: odysee.com/@ericnmurphy
💻 My GitHub: github.com/ericmurphyxyz
0:00 What's wrong with Google ReCAPTCHA?
1:00 Why use ReCAPTCHA?
1:54 What's better about Cloudflare Turnstile?
3:55 Setting up Cloudflare Turnstile
5:20 Adding the front-end code
5:53 Adding the back-end code
8:09 Performance gains
8:40 Analytics
9:15 Conclusion

[@nickwoodward819]

Great video on a not very well covered tool, thanks! Have you got any idea why the widget only shows up like 1 in 3 times? I'm using the demo site key that should force a challenge, but no luck :/

[@toma1610]

I saw that you‘ve been using the last Bootstrap. Did you also used its validation tools? Just upon implementing the first srcipts of the reCaptcha v3, the validation of Bootstrap just stop executing. You can submit a totally empty form y it it is submitted without any validation, or no working the submit button. Did it happen to you?

[@panamacityboi]

Wonderful content as usual, Eric. Thanks for sharing. I always find your stuff invaluable. Keep up the great work!

[@toma1610]

In the repository of Github I see this snippets at the begining: import explicitRenderHtml from './explicit.html'; import implicitRenderHtml from './implicit.html' Then here in the vieo, at 6:05 I read app.use(express.urlenconded...etc. appp.use(express.json...etc. Tell me something, is that something implemented by yourself, so you are customizing it? The documentation about the server side implementation doesn‘t include that code.

[@djkomic]

I just installed Turnstile and it works. I put it on my Contact Form because I kept getting spam emails. However, I noticed now when I go on the contact form to test it, the Turnstile isn't on the page. When I fill out the contact form to test it, fill out the name, email, click send, it clears everything, and then Turnstile pops up asking to confirm if I'm a human. What if someone typed up a long message, and now they have to type it out again? Is there a solution to this?

[@nehalreshu5137]

i am not able to connect client and server side verification ? any help...

[@sensationalopie]

That intro was golden, great video!

[@sumitrastogi5100]

Cloudflare turnstile doesn't work on most of the actual mobile devices.. It always fails when u tick the box of i am a human.. Not sure how to resolve this.. Anyone here who can help??

[@dbc1010]

I guess your are not human ?

[@rmaculada]

Hello. Does Cloudflare works in China?

[@act.13.41]

One of my biggest issues with recaptcha is the quality of the small photos, causing them to be hard for me to see. I hate them.

[@Yavor0971]

Use the audio captcha.

[@angusmacgyver]

I would like some local open source solution, and there are some. Maybe not as user friendly as this. But if I have to use something proprietary, maybe this over recaptcha.

[@EricMurphyxyz]

I prefer open source as well, but it's hard to find one as convenient to set up as this.

[@nickwoodward819]

Pretty sure implicit rendering is borked. Widget shows up when it feels like it, which would be fine if I wasn't using the key to force a challenge, or if it actually attached the invisible field on every submission. But it doesn't.

[@EricMurphyxyz]

Hmm that's strange. Not sure what's going on. Does the explicit method work consistently?

[@nickwoodward819]

@@EricMurphyxyz Hi Eric, I've not tried it yet (*edit, I now have, the async callback, same issue), but I think I've found the cause at least - placing the widget directly into my html renders it every time, inserting the widget into the html with the rest of my elements using JS causes it to intermittently render. I'm assuming it's some sort of race condition, but I'm not entirely sure why :/

[@nickwoodward819]

Yeah, even with the asyc/explicit set up, ` onloadTurnstileCallback` isn't consistently called

[@skverskk]

Great. Easy to follow and understand

[@RedVRCC]

What's especially frustrating is when you get the captchas that say "select until none left", they fucking take so long to disappear when you click them for some reason. There's no fucking need for a fade animation on them, they should just disappear instantly when you click them. We hate captchas so dont make us sit on them even longer. It sucks cause the more you download or access on a site using them, the longer and more arduous the captchas get. Like I literally verified myself earlier, is it that hard to remember the IP that was verified and not make me have to do these every time I want to download an apk on modyolo or some shit? Thankfully I've been starting to see the cloudflare thing quite a bit more often now.

[@GlenRobsonRobson]

3:08

[@WeiFinder]

How many times can you say google recaptcha in a video

[@SIMULATAN]

Wow now that's amazing But hold up... You are using VSC??

[@panamacityboi]

VSCodium maybe?

[@EricMurphyxyz]

Yes, VSCodium, not VSCode

[@NazranaStudioOnlySad]

Google recaptcha not visible issue

[@EricMurphyxyz]

Are you running it in invisible mode?

[@HamguyBacon]

Cloudflare Captcha is 1000X worse than clicking on stop signs! i can't access any website that uses Cloudflare captcha because I'm stuck in an infinite loop!!! I've wasted near 20 minutes clicking the same damn button!

[@davidtaylor2011]

Turnstile is 1000x worse than Google Recaptcha.

[@hanifinio]

how

[@davidtaylor2011]

@@hanifinio When it fails all the time, you are blocked outright. At least with Google Recaptcha, when you correctly click on the pictures enough times, it lets you in.

[@davidtaylor2011]

@@hanifinio When it fails, you don't get access. At least with Google, it let's you in after a few tries.

[@davidtaylor2011]

@@hanifinio When it fails, you are blocked. At least with a recaptcha system, you do eventually get past it.

[@hanifinio]

@@davidtaylor2011 how do you fail