Glossary
Cloudflare Turnstile vs reCAPTCHA: what's the difference?
Cloudflare Turnstile and Google reCAPTCHA both stop bots on forms. Turnstile runs mostly invisible browser challenges and never shows image puzzles; reCAPTCHA v2 shows a checkbox and image grids when unsure, and v3 scores requests silently. In the directory flows we recorded, Turnstile appeared on 35 and reCAPTCHA on 21.
Side by side
| Turnstile | reCAPTCHA | |
|---|---|---|
| Owner | Cloudflare | |
| User experience | Spinner or checkbox | Checkbox, image grid, or invisible |
| Puzzles | No | Yes (v2) |
| Output | Pass/fail token | Pass/fail (v2) or score 0.0 to 1.0 (v3) |
| Price | Free for most uses | Free tier, paid beyond |
| Privacy pitch | No ad use | Google data practices |
| Seen in our flows | 35 | 21 |
For submission agents
Both pass more often in a person's everyday browser than in server-run headless browsers. When either demands interaction, a responsible agent pauses for the user.
Example
A directory switches from reCAPTCHA v2 to Turnstile. Its submission completion rate rises, and image challenges disappear for most visitors.
For site owners choosing one
Turnstile suits sites wanting the least friction and no image puzzles. reCAPTCHA v3 suits sites that want a risk score to make their own decisions, such as asking for extra verification only on low scores. Either way, test the form with privacy extensions and on mobile.
FAQ
Is Turnstile better than reCAPTCHA?
Easier for users and more private; reCAPTCHA v3's scoring gives sites more control.
Can I use Turnstile without Cloudflare's CDN?
Yes.
Which do directories use more?
Turnstile, in the flows we recorded.
Can a site use both?
Technically yes, but most pick one to avoid friction.