Guides
How Cloudflare Turnstile works, and how to solve it from your own code on sites you are allowed to automate: sitekeys and tokens, callbacks and retries, error codes, costs, and moving from another solver.
Cloudflare Turnstile solverCloudflare WAF and 5-second challenge solverBlogGlossaryRSS feed
API
- Captcha API Error Codes: What Each Means and What It CostsERROR_CAPTCHA_UNSOLVABLE, ERROR_ZERO_BALANCE, ERROR_KEY_DOES_NOT_EXIST and the rest: what each captcha API error means, whether to retry, and what it costs.Updated 1 October 2026
- Captcha Solver Callbacks: pingback and callbackUrl, No PollingGet Cloudflare Turnstile results pushed to your server instead of polling: callbackUrl and pingback, what each call contains, retries, and how to answer.Updated 1 October 2026
- Captcha Solver Concurrency, 429s and Retry-AfterRun many Cloudflare Turnstile tasks at once: how ZeroCaptcha paces calls, what 429, ERROR_RATE_LIMIT and ERROR_NO_SLOT_AVAILABLE mean, and how to back off.Updated 1 October 2026
- createTask and getTaskResult: The Captcha API Format ExplainedHow the createTask, getTaskResult and getBalance format works: request bodies, replies, errorId, polling, and ZeroCaptcha's Cloudflare Turnstile tasks.Updated 1 October 2026
- Idempotency Keys: Retry Captcha Tasks Without Paying TwiceUse an Idempotency-Key header so a retried createTask never makes a second task: how keys work for 24 hours, the two key errors, and finding a lost task.Updated 1 October 2026
- Solve Cloudflare Turnstile With a Proxy: TurnstileTask ExplainedWhen to solve Turnstile through your own proxy, how to pass it in createTask, in.php or REST, which proxy types work, and what a bad proxy costs you.Updated 1 October 2026
Billing
- Captcha Solving Cost: Price per 1,000 and What You Really PayHow captcha solving is priced per 1,000, why the real cost differs from the list price, and how to estimate a month of Cloudflare Turnstile tasks.Updated 1 October 2026
- Pay for a Captcha API With Crypto: Top-ups, Receipts, LimitsHow crypto top-ups work on ZeroCaptcha: invoices in US dollars, the hosted checkout, confirmations, under- and overpayments, receipts, and final top-ups.Updated 1 October 2026
Cloudflare
- Cloudflare Challenge Page vs Cloudflare Turnstile: Which Is It?The "Just a moment..." page and the Cloudflare Turnstile widget are different features. How each works, what it produces, and how to tell which you face.Updated 1 October 2026
- The cf_clearance Cookie Explained: User Agent, IP and LifetimeWhat Cloudflare's cf_clearance cookie is, what it is tied to, how long it lasts, and how to reuse it correctly with the same user agent through the same proxy.Updated 1 October 2026
Cloudflare Turnstile
- Cloudflare Turnstile action and cData: When a Task Needs ThemWhat Turnstile's action and cData parameters do, where to find them in a page, and how to pass them in createTask, in.php or REST so the token is accepted.Updated 1 October 2026
- Cloudflare Turnstile Modes: Managed, Non-Interactive, InvisibleCloudflare Turnstile's three widget modes compared: what visitors see in each, how to tell which one a page uses, and why a solving task is the same for all.Updated 1 October 2026
- Cloudflare Turnstile Token Expired? Lifetime and Reuse ExplainedCloudflare Turnstile tokens last 300 seconds and work once. Why tokens expire, what timeout-or-duplicate means, and how to use each token before it runs out.Updated 1 October 2026
- How to Find a Cloudflare Turnstile Sitekey on Any PageFind a Cloudflare Turnstile sitekey in data-sitekey, in turnstile.render() or in the network log, and check you have the right one before you send a task.Updated 1 October 2026
- Scraping a Site With Cloudflare Turnstile: An Authorized PipelineCollect data you are allowed to collect from pages behind Cloudflare Turnstile: when a solver fits, how to add it to a pipeline, and when to ask first.Updated 1 October 2026
- Submit a Cloudflare Turnstile Token: Form Fields and CallbacksWhere a solved Turnstile token goes: the cf-turnstile-response field, the widget's callback, or a JSON body. With examples for forms, fetch and browsers.Updated 1 October 2026
- What Is Cloudflare Turnstile? The CAPTCHA Widget ExplainedCloudflare Turnstile explained: the widget, the token it issues, how a site verifies it, and what that means when you automate a page that shows it.Updated 1 October 2026
Migration
- Migrate From 2Captcha: Cloudflare Turnstile in.php and createTaskMove Cloudflare Turnstile solving from 2Captcha to ZeroCaptcha: keep in.php and res.php or createTask, change the host and key, and check what differs.Updated 1 October 2026
- Migrate From Anti-Captcha: TurnstileTask on ZeroCaptchaMove Cloudflare Turnstile tasks from Anti-Captcha to ZeroCaptcha: the same task types, calls and field names, cData included, and what to check first.Updated 1 October 2026
- Migrate From CapSolver: AntiTurnstileTaskProxyLess on ZeroCaptchaMove Cloudflare Turnstile tasks from CapSolver to ZeroCaptcha: AntiTurnstileTaskProxyLess and its metadata fields work as they are. Change host and key.Updated 1 October 2026
Security
- Responsible Captcha Automation: Acceptable Use and Opt-outsWhen using a captcha solver is appropriate, what ZeroCaptcha's Acceptable Use Policy allows, and how site owners opt out or report abuse, all handled by people.Updated 1 October 2026
- Secure Captcha API Keys: IP Allowlists, Rotation, Spend CapsProtect a captcha API key and your balance: scopes, IP allowlists, daily spend caps, rotation with an overlap, instant revocation, and spotting a leaked key.Updated 1 October 2026
- Verify a Webhook's HMAC-SHA256 Signature, With Replay ProtectionCheck a ZeroCaptcha callback's HMAC-SHA256 signature in Node, Python or Go: the raw body, a constant-time compare, the timestamp window and secret rotation.Updated 1 October 2026