Cloudflare bot widget not auto-checking as of yesterday - issue?
I am an end user (i.e., a regular user of various web sties) and some of the sites I visit regularly use the Cloudflare anti-bot mechanism (where it either displays a widget that has a checkbox (which always auto-checks for me, saying "Success!"), or it shows a 'please wait while verified', and then auto-redirects me to the actual site once verified.
As of yesterday (April 29), all the sties that use Cloudflare protection are now not auto-checking the box and have added, for a legitimate user like myself, extra steps to have to check boxes whereas previously it would auto-check each and every time. I have tried every single flavor of browser, from MS Edge, Chrome, Firefox, and even Safari, and they are all behaving the same now (requiring a manual checking of the box each and every time)
I wanted to report this and see if Cloudflare was aware of this, and what can be done to resolve this issue? Any guidance or assistance here would be greatly appreciated. Thanks in advance.
9 Replies
To clarify, are you just having to click the checkbox, or is it having you do more steps than that?
I am having to click the checkbox. It is my understanding that Cloudflare auto-checks for legitimate users, and that manual checking is only for when it suspects something.
A couple of months ago, I noticed the same thing happen, but with Firefox only (i.e., when I was using Firefox, it would ask me to check the box every single time), but it was resolved about a week later (it started auto-checking every time).
A couple of months ago, I noticed the same thing happen, but with Firefox only (i.e., when I was using Firefox, it would ask me to check the box every single time), but it was resolved about a week later (it started auto-checking every time).
IIRC it may also be based on IP reputation, so it may be that someone using your IP/IP block may be generating suspicious traffic?
I don't think so, I am using my home ISP (Verizon), and for testing's sake, I also tried using / accessing from my work (a corporate office).
?turnstile-issues And just to check, you've tried all of these?
If you're having trouble passing Cloudflare Turnstile or Managed Challenges, you can try taking the following steps:
1. Check your browser and use a different one if necessary. Cloudflare challenges support the latest versions of popular browsers but some forks (such as Pale Moon) are not supported. See this link for more info: https://developers.cloudflare.com/fundamentals/get-started/concepts/cloudflare-challenges/#supported-browsers
2. Disable your browser extensions. Sometimes browser extensions can cause Cloudflare challenges to block your browser.
3. Scan your computer for malware (for example, using a free tool such as Malwarebytes). Sometimes malware can cause Cloudflare challenges to detect your computer as malicious and block it.
Thanks for all the help so far. Yes, I have tried all of those, including:
- different browsers, including incognito/private mode
- different computers (Windows PC, MacOS)
- different ISP/networks (i just even tried using my T-mobile mobile hotspot, and still the same thing)
edit: i am not using any browser extensions on any of the browsers. The browsers I've tried are: MS Edge, Chrome, Firefox, and Safari (all latest versions)
Hm... not sure to be honest(I'm not on the Turnstile team). Maybe it is a regional thing? You can try catching the Turnstile QR Code and post it to #🤖turnstile for someone to check if they have time?
Cloudflare Docs
Troubleshooting FAQ
The Turnstile widget needs to be refreshed to generate a new token. This can be done using the turnstile.reset function.
I've tried this on multiple ISP (and IPs), including mobile hotspot which has unique IPs every time I connect. I believe I've used at least 5-10 different IP's, all from different subnets (I checked to make sure). I don't think my IP is flagged
Thanks. As an example, I went to https://dash.cloudflare.com/login and can reproduce the issue there. I got the QR code value so will try posting in the other channel.
By any chance is there a way to report this to the dev team or the support team specific to the turnstile component?