Skip to main content

Cloudflare Turnstile (Captcha)

Cloudflare Turnstile is the captcha HollaEx uses to protect your exchange's login and sign-up forms from bots. Most visitors pass it without having to solve a puzzle. Operator Controls supports Cloudflare Turnstile; it doesn't offer Google reCAPTCHA.

You need a Cloudflare account. Turnstile is configured in Cloudflare, not in HollaEx.

1. Create a Turnstile widget in Cloudflare​

  1. Sign in to the Cloudflare dashboard and open Turnstile.
  2. Add a widget for your exchange.
  3. Under the widget's Hostnames, add:
    • your exchange's domain, and
    • dash.hollaex.com, because the Operator Controls sign-in shows the same captcha. Without it, you can't complete the captcha when signing in to Operator Controls.
  4. Save the widget and copy its site key and secret key.

2. Add the keys in Operator Controls​

  1. Go to Operator Controls → Exchange → Configuration → Security.
  2. Find Cloudflare Turnstile ("Enable Cloudflare Turnstile to protect login and sign up forms") and turn the switch on.
  3. Paste the Site key and the Secret key.
  4. Click Save.

Then open your exchange's login page to check that the captcha appears and works.

Turning Turnstile off​

Turning the Cloudflare Turnstile switch off removes both keys from your exchange straight away. To turn it back on, enter the keys again.

Troubleshooting​

If the captcha fails or never loads when you sign in to Operator Controls ("Please complete the captcha verification"), your widget doesn't list dash.hollaex.com as a hostname. Add it in Cloudflare under Turnstile → your widget → Hostnames. See Operator Controls.