Let readers comment without an account

1. Get Turnstile keys

Turnstile is Cloudflare's free alternative to a captcha. Disfora runs it on your page with your own keys, so the check belongs to your site, not to us. You need a free Cloudflare account, but your site doesn't have to use Cloudflare.

1. In your Cloudflare dashboard, open Turnstile and add a widget.
2. Under hostnames, add the domain your pages are on, like yoursite.com. If you serve comments from comments.yoursite.com, you still only need the domain of your pages.
3. Leave the widget mode on Managed, Cloudflare's default.
4. Copy the site key and the secret key.

2. Add the keys to Disfora

In your project, open Settings and find the Captcha card. Paste the site key and the secret key and click Save keys. The card shows Connected once they're saved. Forms with the captcha turned on use the same keys.

3. Turn on guest comments

On the same page, turn on Allow guest comments, under comment approval. The switch stays off until the Turnstile keys are saved. If you disconnect the keys later, guest comments pause and readers sign in to comment until you add keys again.

What guests see

• Signed-out readers get the comment box straight away, in place of the sign-in prompt.
• The first time they post, Disfora asks for a name, between 2 and 40 characters, with a Sign in link for readers who have an account. The browser remembers the name: the box shows Posting as it, and Change edits it.
• The Turnstile check runs out of sight. If Cloudflare wants a click, a One more step dialog shows the checkbox.
• Their comment shows with a Guest label and Pending approval until a moderator approves it.

Moderating guest comments

Every guest comment goes to your moderation queue as Pending, labelled Guest, whatever your comment approval setting is. Approve it and it appears for everyone, and anyone it replies to is notified then.

• Banned keywords, automations and locked threads apply to guests as they do to everyone else.
• Guests are rate limited by IP address, and repeated rejected attempts lock them out for a while.
• In webhooks, a guest's author has a name and a null username.

What guests can't do

• Vote on comments, rate pages or vote in polls that require sign-in.
• Edit or delete a comment after posting it.
• Get notified of replies, or build up Clout. Votes on a guest's comment count, but credit no one.

Readers who want those sign in with Google or an email code, once, and the same account works on every site that runs Disfora.

Ask a question

Something missing or unclear? Ask here and we'll answer in the thread.