跳转到主要内容

Error codes

import { GlossaryTooltip, Render } from "~/components";

:::note When an error code is marked with *, the remaining digits can vary and are for internal use. :::

Error Code Description Retry Troubleshooting
110100 Invalid sitekey No Verify the sitekey in Cloudflare dashboard.
110110 Sitekey not found No Check sitekey spelling and dashboard configuration.
110200 Domain not authorized No Add current domain in Hostname Management.
110600 Challenge timed out Yes The visitor's clock may be wrong, or the challenge took too long.
110620 Interaction timed out Yes The visitor did not interact with the widget in time. Reset with turnstile.reset().
200100 Clock or cache problem No The visitor's clock is wrong or the challenge was cached by an intermediary.
200500 Iframe load error Yes The Turnstile iframe could not load. Check if challenges.cloudflare.com is blocked.
300* Generic challenge failure Yes Bot behavior detected. Refer to troubleshooting.
400020 Invalid sitekey No Verify the sitekey in Cloudflare dashboard.
400021 Sitekey domain mismatch No Sitekey region does not match domain in the Turnstile script tag.
400070 Sitekey disabled No The sitekey is disabled. Check the Cloudflare dashboard.
600* Generic challenge failure Yes Bot behavior detected. Refer to troubleshooting.

Troubleshooting

You can troubleshoot these error codes using the following recommendations:

:::caution[Error code 401]

Turnstile may occasionally generate a 401 Unauthorized error in your browser console during a security check. This is not typically a problem with your implementation. This error often occurs when the widget attempts to request a Private Access Token that your device or browser does not support yet.

You can generally safely ignore the 401 error, as it is an expected part of Turnstile's underlying Challenge Platform workflow. If the widget is successfully resolving and you are receiving a token, no action is required.